MichaelAgarkov/CodeBlocksPortable
MichaelAgarkov/CodeBlocksPortable
Archived
1
1
Fork 0
Code Issues Pull requests Actions Packages Projects Releases Wiki Activity
This repository has been archived on 2024-12-16. You can view files and clone it, but cannot push or open issues or pull requests.
CodeBlocksPortable/MinGW/include/ddk/winddk.h

8349 lines
215 KiB
C
Raw Normal View History

My portable distribution of Code::Blocks
2024-07-04 16:52:56 +00:00
/*
* ddk/winddk.h
*
* Windows Device Driver Kit -- common elements.
*
* $Id: winddk.h,v 6d2220f53104 2016/07/21 21:20:34 keithmarshall $
*
* Written by Casper S. Hornstrup <chorns@users.sourceforge.net>
* Copyright (C) 2002-2004, 2006, 2008-2011, 2015, 2016, MinGW.org Project.
*
*
* Permission is hereby granted, free of charge, to any person obtaining a
* copy of this software and associated documentation files (the "Software"),
* to deal in the Software without restriction, including without limitation
* the rights to use, copy, modify, merge, publish, distribute, sublicense,
* and/or sell copies of the Software, and to permit persons to whom the
* Software is furnished to do so, subject to the following conditions:
*
* The above copyright notice, this permission notice, and the following
* disclaimer shall be included in all copies or substantial portions of
* the Software.
*
* THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS
* OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
* FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
* THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
* LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
* FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OF OR OTHER
* DEALINGS IN THE SOFTWARE.
*
*/
#ifndef _DDK_WINDDK_H
#pragma GCC system_header
#if ! (defined _DDK_NTDDK_H || defined __WINIOCTL_H_SOURCED__)
/* Unless sourced by <winioctl.h>, (which represents only partial inclusion),
* <ddk/winddk.h> is subsidiary to <ddk/ntddk.h>, and cannot stand alone.
*/
# error "Never include <ddk/winddk.h> directly; use <ddk/ntddk.h> instead."
#else
/* We've reached here by a legitimate sequence of header inclusion...
*/
# ifndef __WINIOCTL_H_SOURCED__
/* ...but it is NOT sourced by <winioctl.h>, so this is full inclusion:
* set the repeat inclusion guard, so we will not include it again.
*/
# define _DDK_WINDDK_H
# endif
#if ! (defined _DDK_WINDDK_H && defined _WINIOCTL_H)
/* The declarations within this section are common to <ddk/winddk.h> and
* to <winioctl.h>, but if BOTH repeat inclusion guards are now defined,
* then we've already seen this; there is no need to process it again.
*/
#define CTL_CODE(DT,FN,M,A) (((DT)<<16)|((FN)<<2)|((A)<<14)|(M))
#define DEVICE_TYPE_FROM_CTL_CODE(C) (((ULONG)((C) & (0xFFFF0000)) >> 16)
typedef ULONG DEVICE_TYPE;
enum
{ FILE_DEVICE_BEEP = 0x00000001UL,
FILE_DEVICE_CD_ROM = 0x00000002UL,
FILE_DEVICE_CD_ROM_FILE_SYSTEM = 0x00000003UL,
FILE_DEVICE_CONTROLLER = 0x00000004UL,
FILE_DEVICE_DATALINK = 0x00000005UL,
FILE_DEVICE_DFS = 0x00000006UL,
FILE_DEVICE_DISK = 0x00000007UL,
FILE_DEVICE_DISK_FILE_SYSTEM = 0x00000008UL,
FILE_DEVICE_FILE_SYSTEM = 0x00000009UL,
FILE_DEVICE_INPORT_PORT = 0x0000000AUL,
FILE_DEVICE_KEYBOARD = 0x0000000BUL,
FILE_DEVICE_MAILSLOT = 0x0000000CUL,
FILE_DEVICE_MIDI_IN = 0x0000000DUL,
FILE_DEVICE_MIDI_OUT = 0x0000000EUL,
FILE_DEVICE_MOUSE = 0x0000000FUL,
FILE_DEVICE_MULTI_UNC_PROVIDER = 0x00000010UL,
FILE_DEVICE_NAMED_PIPE = 0x00000011UL,
FILE_DEVICE_NETWORK = 0x00000012UL,
FILE_DEVICE_NETWORK_BROWSER = 0x00000013UL,
FILE_DEVICE_NETWORK_FILE_SYSTEM = 0x00000014UL,
FILE_DEVICE_NULL = 0x00000015UL,
FILE_DEVICE_PARALLEL_PORT = 0x00000016UL,
FILE_DEVICE_PHYSICAL_NETCARD = 0x00000017UL,
FILE_DEVICE_PRINTER = 0x00000018UL,
FILE_DEVICE_SCANNER = 0x00000019UL,
FILE_DEVICE_SERIAL_MOUSE_PORT = 0x0000001AUL,
FILE_DEVICE_SERIAL_PORT = 0x0000001BUL,
FILE_DEVICE_SCREEN = 0x0000001CUL,
FILE_DEVICE_SOUND = 0x0000001DUL,
FILE_DEVICE_STREAMS = 0x0000001EUL,
FILE_DEVICE_TAPE = 0x0000001FUL,
FILE_DEVICE_TAPE_FILE_SYSTEM = 0x00000020UL,
FILE_DEVICE_TRANSPORT = 0x00000021UL,
FILE_DEVICE_UNKNOWN = 0x00000022UL,
FILE_DEVICE_VIDEO = 0x00000023UL,
FILE_DEVICE_VIRTUAL_DISK = 0x00000024UL,
FILE_DEVICE_WAVE_IN = 0x00000025UL,
FILE_DEVICE_WAVE_OUT = 0x00000026UL,
FILE_DEVICE_8042_PORT = 0x00000027UL,
FILE_DEVICE_NETWORK_REDIRECTOR = 0x00000028UL,
FILE_DEVICE_BATTERY = 0x00000029UL,
FILE_DEVICE_BUS_EXTENDER = 0x0000002AUL,
FILE_DEVICE_MODEM = 0x0000002BUL,
FILE_DEVICE_VDM = 0x0000002CUL,
FILE_DEVICE_MASS_STORAGE = 0x0000002DUL,
FILE_DEVICE_SMB = 0x0000002EUL,
FILE_DEVICE_KS = 0x0000002FUL,
FILE_DEVICE_CHANGER = 0x00000030UL,
FILE_DEVICE_SMARTCARD = 0x00000031UL,
FILE_DEVICE_ACPI = 0x00000032UL,
FILE_DEVICE_DVD = 0x00000033UL,
FILE_DEVICE_FULLSCREEN_VIDEO = 0x00000034UL,
FILE_DEVICE_DFS_FILE_SYSTEM = 0x00000035UL,
FILE_DEVICE_DFS_VOLUME = 0x00000036UL,
FILE_DEVICE_SERENUM = 0x00000037UL,
FILE_DEVICE_TERMSRV = 0x00000038UL,
FILE_DEVICE_KSEC = 0x00000039UL,
FILE_DEVICE_FIPS = 0x0000003AUL
};
enum
{ FILE_ANY_ACCESS = 0x00000000UL,
FILE_SPECIAL_ACCESS = FILE_ANY_ACCESS,
FILE_READ_ACCESS = 0x00000001UL,
FILE_WRITE_ACCESS = 0x00000002UL
};
enum
{ METHOD_BUFFERED = 0,
METHOD_IN_DIRECT = 1,
METHOD_OUT_DIRECT = 2,
METHOD_NEITHER = 3
};
/* Some derived convenience macros; Microsoft do not specify these,
* but they help to keep the CTL_CODE specifications tidy.
*/
#define __FILE_RW_ACCESS (FILE_READ_ACCESS | FILE_WRITE_ACCESS)
#define __FILE_AM_BUFFERED(F,OP) F(OP, METHOD_BUFFERED, FILE_ANY_ACCESS)
#define __FILE_RD_BUFFERED(F,OP) F(OP, METHOD_BUFFERED, FILE_READ_ACCESS)
#define __FILE_RW_BUFFERED(F,OP) F(OP, METHOD_BUFFERED, __FILE_RW_ACCESS)
typedef
struct _DRIVE_LAYOUT_INFORMATION_MBR
/* https://msdn.microsoft.com/en-us/library/windows/hardware/ff552668(v=vs.85).aspx */
{ ULONG Signature;
} DRIVE_LAYOUT_INFORMATION_MBR, *PDRIVE_LAYOUT_INFORMATION_MBR;
typedef
struct _DRIVE_LAYOUT_INFORMATION_GPT
/* https://msdn.microsoft.com/en-us/library/windows/hardware/ff552664(v=vs.85).aspx */
{ GUID DiskId;
LARGE_INTEGER StartingUsableOffset;
LARGE_INTEGER UsableLength;
ULONG MaxPartitionCount;
} DRIVE_LAYOUT_INFORMATION_GPT, *PDRIVE_LAYOUT_INFORMATION_GPT;
typedef
struct _PARTITION_INFORMATION_MBR
/* https://msdn.microsoft.com/en-us/library/windows/hardware/ff563767(v=vs.85).aspx */
{ UCHAR PartitionType;
BOOLEAN BootIndicator;
BOOLEAN RecognizedPartition;
ULONG HiddenSectors;
} PARTITION_INFORMATION_MBR, *PPARTITION_INFORMATION_MBR;
typedef
enum _PARTITION_STYLE
/* https://msdn.microsoft.com/en-us/library/windows/hardware/ff563773(v=vs.85).aspx */
{ PARTITION_STYLE_MBR = 0,
PARTITION_STYLE_GPT = 1,
PARTITION_STYLE_RAW = 2
} PARTITION_STYLE;
typedef
struct _CREATE_DISK_MBR
/* https://msdn.microsoft.com/en-us/library/windows/hardware/ff552490(v=vs.85).aspx */
{ ULONG Signature;
} CREATE_DISK_MBR, *PCREATE_DISK_MBR;
typedef
struct _CREATE_DISK_GPT
/* https://msdn.microsoft.com/en-us/library/windows/hardware/ff552486(v=vs.85).aspx */
{ GUID DiskId;
ULONG MaxPartitionCount;
} CREATE_DISK_GPT, *PCREATE_DISK_GPT;
typedef
struct _CREATE_DISK
/* https://msdn.microsoft.com/en-us/library/windows/hardware/ff552490(v=vs.85).aspx */
{ PARTITION_STYLE PartitionStyle;
_ANONYMOUS_UNION union
{ CREATE_DISK_MBR Mbr;
CREATE_DISK_GPT Gpt;
} DUMMYUNIONNAME;
} CREATE_DISK, *PCREATE_DISK;
/* End of _DDK_WINDDK_H and _WINIOCTL_H common declarations.
*/
#endif
#ifdef _DDK_WINDDK_H
/* Definitions specific to _DDK_WINDDK_H
*/
_BEGIN_C_DECLS
#define DDKAPI __stdcall
#define DDKFASTAPI __fastcall
#define DDKCDECLAPI __cdecl
#if defined(_NTOSKRNL_)
# ifndef NTOSAPI
# define NTOSAPI DECL_EXPORT
# endif
# define DECLARE_INTERNAL_OBJECT(x) typedef struct _##x; typedef struct _##x *P##x;
# define DECLARE_INTERNAL_OBJECT2(x,y) typedef struct _##x; typedef struct _##x *P##y;
#else
# ifndef NTOSAPI
# define NTOSAPI DECL_IMPORT
# endif
# define DECLARE_INTERNAL_OBJECT(x) struct _##x; typedef struct _##x *P##x;
# define DECLARE_INTERNAL_OBJECT2(x,y) struct _##x; typedef struct _##x *P##y;
#endif
#ifndef _NO_W32_PSEUDO_MODIFIERS
/* Pseudo modifiers for parameters...
*
* We don't use these unnecessary defines in the w32api headers. Define
* them by default since that is what people expect, but allow users to
* avoid the pollution, by defining _NO_W32_PSEUDO_MODIFIERS.
*/
# define IN
# define OUT
# define OPTIONAL
# define UNALLIGNED
#endif
#define CONST const
#define VOLATILE volatile
#define RESTRICTED_POINTER
#define POINTER_ALIGNMENT
#ifdef NONAMELESSUNION
# define _DDK_DUMMYUNION_MEMBER(name) DUMMYUNIONNAME.name
# define _DDK_DUMMYUNION_N_MEMBER(n, name) DUMMYUNIONNAME##n.name
#else
# define _DDK_DUMMYUNION_MEMBER(name) name
# define _DDK_DUMMYUNION_N_MEMBER(n, name) name
#endif
/* Forward declarations
*/
struct _IRP;
struct _MDL;
struct _KAPC;
struct _KDPC;
struct _KPCR;
struct _KPRCB;
struct _KTSS;
struct _FILE_OBJECT;
struct _DMA_ADAPTER;
struct _DEVICE_OBJECT;
struct _DRIVER_OBJECT;
struct _SECTION_OBJECT;
struct _IO_STATUS_BLOCK;
struct _DEVICE_DESCRIPTION;
struct _SCATTER_GATHER_LIST;
DECLARE_INTERNAL_OBJECT(ADAPTER_OBJECT)
DECLARE_INTERNAL_OBJECT(DMA_ADAPTER)
DECLARE_INTERNAL_OBJECT(IO_STATUS_BLOCK)
DECLARE_INTERNAL_OBJECT(SECTION_OBJECT)
#if 1
/* FIXME: Unknown definitions
*/
struct _SET_PARTITION_INFORMATION_EX;
typedef ULONG WAIT_TYPE;
typedef HANDLE TRACEHANDLE;
typedef PVOID PWMILIB_CONTEXT;
typedef PVOID PSYSCTL_IRP_DISPOSITION;
typedef ULONG LOGICAL;
#endif
/* Routines specific to this DDK
*/
#define TAG(_a, _b, _c, _d) (ULONG) \
(((_a) << 0) + ((_b) << 8) + ((_c) << 16) + ((_d) << 24))
#ifdef __GNUC__
static __inline__ struct _KPCR * KeGetCurrentKPCR( VOID )
{
ULONG Value;
__asm__ __volatile__ (
#if (__GNUC__ >= 3)
/* support -masm=intel */
"mov{l} {%%fs:0x18, %0|%0, %%fs:0x18}\n\t"
#else
"movl %%fs:0x18, %0\n\t"
#endif
: "=r" (Value)
: /* no inputs */
);
return (struct _KPCR *)(Value);
}
#elif defined( __WATCOMC__ )
extern struct _KPCR * KeGetCurrentKPCR( void );
#pragma aux KeGetCurrentKPCR = \
"mov eax, fs:[0x18]" \
value [ eax ];
#endif
/* Simple structures
*/
typedef LONG KPRIORITY;
typedef UCHAR KIRQL, *PKIRQL;
typedef ULONG_PTR KSPIN_LOCK, *PKSPIN_LOCK;
typedef ULONG_PTR KAFFINITY, *PKAFFINITY;
typedef CCHAR KPROCESSOR_MODE;
typedef
enum _MODE
{ KernelMode,
UserMode,
MaximumMode
} MODE;
/* Structures not exposed to drivers
*/
typedef struct _IO_TIMER *PIO_TIMER;
typedef struct _EPROCESS *PEPROCESS;
typedef struct _ETHREAD *PETHREAD;
typedef struct _KINTERRUPT *PKINTERRUPT;
typedef struct _OBJECT_TYPE *POBJECT_TYPE;
typedef struct _KTHREAD *PKTHREAD, *PRKTHREAD;
typedef struct _COMPRESSED_DATA_INFO *PCOMPRESSED_DATA_INFO;
typedef struct _HAL_DISPATCH_TABLE *PHAL_DISPATCH_TABLE;
typedef struct _HAL_PRIVATE_DISPATCH_TABLE *PHAL_PRIVATE_DISPATCH_TABLE;
typedef struct _DRIVE_LAYOUT_INFORMATION *PDRIVE_LAYOUT_INFORMATION;
typedef struct _DRIVE_LAYOUT_INFORMATION_EX *PDRIVE_LAYOUT_INFORMATION_EX;
/* Constants
*/
#define MAXIMUM_PROCESSORS 32
#define MAXIMUM_WAIT_OBJECTS 64
#define LOW_PRIORITY 0
#define LOW_REALTIME_PRIORITY 16
#define HIGH_PRIORITY 31
#define MAXIMUM_PRIORITY 32
#define FILE_SUPERSEDED 0x00000000
#define FILE_OPENED 0x00000001
#define FILE_CREATED 0x00000002
#define FILE_OVERWRITTEN 0x00000003
#define FILE_EXISTS 0x00000004
#define FILE_DOES_NOT_EXIST 0x00000005
#if 1
/* FIXME: also in winnt.h; hence, already defined?
*/
#define FILE_LIST_DIRECTORY 0x00000001
#define FILE_READ_DATA 0x00000001
#define FILE_ADD_FILE 0x00000002
#define FILE_WRITE_DATA 0x00000002
#define FILE_ADD_SUBDIRECTORY 0x00000004
#define FILE_APPEND_DATA 0x00000004
#define FILE_CREATE_PIPE_INSTANCE 0x00000004
#define FILE_READ_EA 0x00000008
#define FILE_WRITE_EA 0x00000010
#define FILE_EXECUTE 0x00000020
#define FILE_TRAVERSE 0x00000020
#define FILE_DELETE_CHILD 0x00000040
#define FILE_READ_ATTRIBUTES 0x00000080
#define FILE_WRITE_ATTRIBUTES 0x00000100
#define FILE_SHARE_READ 0x00000001
#define FILE_SHARE_WRITE 0x00000002
#define FILE_SHARE_DELETE 0x00000004
#define FILE_SHARE_VALID_FLAGS 0x00000007
#define FILE_ATTRIBUTE_READONLY 0x00000001
#define FILE_ATTRIBUTE_HIDDEN 0x00000002
#define FILE_ATTRIBUTE_SYSTEM 0x00000004
#define FILE_ATTRIBUTE_DIRECTORY 0x00000010
#define FILE_ATTRIBUTE_ARCHIVE 0x00000020
#define FILE_ATTRIBUTE_DEVICE 0x00000040
#define FILE_ATTRIBUTE_NORMAL 0x00000080
#define FILE_ATTRIBUTE_TEMPORARY 0x00000100
#define FILE_ATTRIBUTE_SPARSE_FILE 0x00000200
#define FILE_ATTRIBUTE_REPARSE_POINT 0x00000400
#define FILE_ATTRIBUTE_COMPRESSED 0x00000800
#define FILE_ATTRIBUTE_OFFLINE 0x00001000
#define FILE_ATTRIBUTE_NOT_CONTENT_INDEXED 0x00002000
#define FILE_ATTRIBUTE_ENCRYPTED 0x00004000
#define FILE_ATTRIBUTE_VIRTUAL 0x00010000
#define FILE_ATTRIBUTE_VALID_FLAGS 0x00017fb7
#define FILE_ATTRIBUTE_VALID_SET_FLAGS 0x000031a7
#define FILE_COPY_STRUCTURED_STORAGE 0x00000041
#define FILE_STRUCTURED_STORAGE 0x00000441
#define FILE_VALID_OPTION_FLAGS 0x00ffffff
#define FILE_VALID_PIPE_OPTION_FLAGS 0x00000032
#define FILE_VALID_MAILSLOT_OPTION_FLAGS 0x00000032
#define FILE_VALID_SET_FLAGS 0x00000036
#define FILE_SUPERSEDE 0x00000000
#define FILE_OPEN 0x00000001
#define FILE_CREATE 0x00000002
#define FILE_OPEN_IF 0x00000003
#define FILE_OVERWRITE 0x00000004
#define FILE_OVERWRITE_IF 0x00000005
#define FILE_MAXIMUM_DISPOSITION 0x00000005
#define FILE_DIRECTORY_FILE 0x00000001
#define FILE_WRITE_THROUGH 0x00000002
#define FILE_SEQUENTIAL_ONLY 0x00000004
#define FILE_NO_INTERMEDIATE_BUFFERING 0x00000008
#define FILE_SYNCHRONOUS_IO_ALERT 0x00000010
#define FILE_SYNCHRONOUS_IO_NONALERT 0x00000020
#define FILE_NON_DIRECTORY_FILE 0x00000040
#define FILE_CREATE_TREE_CONNECTION 0x00000080
#define FILE_COMPLETE_IF_OPLOCKED 0x00000100
#define FILE_NO_EA_KNOWLEDGE 0x00000200
#define FILE_OPEN_FOR_RECOVERY 0x00000400
#define FILE_RANDOM_ACCESS 0x00000800
#define FILE_DELETE_ON_CLOSE 0x00001000
#define FILE_OPEN_BY_FILE_ID 0x00002000
#define FILE_OPEN_FOR_BACKUP_INTENT 0x00004000
#define FILE_NO_COMPRESSION 0x00008000
#define FILE_RESERVE_OPFILTER 0x00100000
#define FILE_OPEN_REPARSE_POINT 0x00200000
#define FILE_OPEN_NO_RECALL 0x00400000
#define FILE_OPEN_FOR_FREE_SPACE_QUERY 0x00800000
#define FILE_ALL_ACCESS (STANDARD_RIGHTS_REQUIRED | SYNCHRONIZE | 0x1FF)
#define FILE_GENERIC_EXECUTE \
(STANDARD_RIGHTS_EXECUTE | FILE_READ_ATTRIBUTES | FILE_EXECUTE | SYNCHRONIZE)
#define FILE_GENERIC_READ \
(STANDARD_RIGHTS_READ | FILE_READ_DATA | FILE_READ_ATTRIBUTES \
| FILE_READ_EA | SYNCHRONIZE)
#define FILE_GENERIC_WRITE \
(STANDARD_RIGHTS_WRITE | FILE_WRITE_DATA | FILE_WRITE_ATTRIBUTES \
| FILE_WRITE_EA | FILE_APPEND_DATA | SYNCHRONIZE)
#endif /* winnt.h */
#define DIRECTORY_QUERY (0x0001)
#define DIRECTORY_TRAVERSE (0x0002)
#define DIRECTORY_CREATE_OBJECT (0x0004)
#define DIRECTORY_CREATE_SUBDIRECTORY (0x0008)
#define DIRECTORY_ALL_ACCESS (STANDARD_RIGHTS_REQUIRED | 0xF)
/* Exported object types
*/
extern NTOSAPI POBJECT_TYPE ExDesktopObjectType;
extern NTOSAPI POBJECT_TYPE ExEventObjectType;
extern NTOSAPI POBJECT_TYPE ExSemaphoreObjectType;
extern NTOSAPI POBJECT_TYPE ExWindowStationObjectType;
extern NTOSAPI POBJECT_TYPE IoAdapterObjectType;
extern NTOSAPI ULONG IoDeviceHandlerObjectSize;
extern NTOSAPI POBJECT_TYPE IoDeviceHandlerObjectType;
extern NTOSAPI POBJECT_TYPE IoDeviceObjectType;
extern NTOSAPI POBJECT_TYPE IoDriverObjectType;
extern NTOSAPI POBJECT_TYPE IoFileObjectType;
extern NTOSAPI POBJECT_TYPE LpcPortObjectType;
extern NTOSAPI POBJECT_TYPE MmSectionObjectType;
extern NTOSAPI POBJECT_TYPE SeTokenObjectType;
extern NTOSAPI CCHAR KeNumberProcessors;
extern NTOSAPI PHAL_DISPATCH_TABLE HalDispatchTable;
extern NTOSAPI PHAL_PRIVATE_DISPATCH_TABLE HalPrivateDispatchTable;
/* IRP function codes
*/
#define IRP_MJ_CREATE 0x00
#define IRP_MJ_CREATE_NAMED_PIPE 0x01
#define IRP_MJ_CLOSE 0x02
#define IRP_MJ_READ 0x03
#define IRP_MJ_WRITE 0x04
#define IRP_MJ_QUERY_INFORMATION 0x05
#define IRP_MJ_SET_INFORMATION 0x06
#define IRP_MJ_QUERY_EA 0x07
#define IRP_MJ_SET_EA 0x08
#define IRP_MJ_FLUSH_BUFFERS 0x09
#define IRP_MJ_QUERY_VOLUME_INFORMATION 0x0a
#define IRP_MJ_SET_VOLUME_INFORMATION 0x0b
#define IRP_MJ_DIRECTORY_CONTROL 0x0c
#define IRP_MJ_FILE_SYSTEM_CONTROL 0x0d
#define IRP_MJ_DEVICE_CONTROL 0x0e
#define IRP_MJ_INTERNAL_DEVICE_CONTROL 0x0f
#define IRP_MJ_SCSI 0x0f
#define IRP_MJ_SHUTDOWN 0x10
#define IRP_MJ_LOCK_CONTROL 0x11
#define IRP_MJ_CLEANUP 0x12
#define IRP_MJ_CREATE_MAILSLOT 0x13
#define IRP_MJ_QUERY_SECURITY 0x14
#define IRP_MJ_SET_SECURITY 0x15
#define IRP_MJ_POWER 0x16
#define IRP_MJ_SYSTEM_CONTROL 0x17
#define IRP_MJ_DEVICE_CHANGE 0x18
#define IRP_MJ_QUERY_QUOTA 0x19
#define IRP_MJ_SET_QUOTA 0x1a
#define IRP_MJ_PNP 0x1b
#define IRP_MJ_PNP_POWER 0x1b
#define IRP_MJ_MAXIMUM_FUNCTION 0x1b
#define IRP_MN_QUERY_DIRECTORY 0x01
#define IRP_MN_NOTIFY_CHANGE_DIRECTORY 0x02
#define IRP_MN_USER_FS_REQUEST 0x00
#define IRP_MN_MOUNT_VOLUME 0x01
#define IRP_MN_VERIFY_VOLUME 0x02
#define IRP_MN_LOAD_FILE_SYSTEM 0x03
#define IRP_MN_TRACK_LINK 0x04
#define IRP_MN_KERNEL_CALL 0x04
#define IRP_MN_LOCK 0x01
#define IRP_MN_UNLOCK_SINGLE 0x02
#define IRP_MN_UNLOCK_ALL 0x03
#define IRP_MN_UNLOCK_ALL_BY_KEY 0x04
#define IRP_MN_NORMAL 0x00
#define IRP_MN_DPC 0x01
#define IRP_MN_MDL 0x02
#define IRP_MN_COMPLETE 0x04
#define IRP_MN_COMPRESSED 0x08
#define IRP_MN_MDL_DPC (IRP_MN_MDL | IRP_MN_DPC)
#define IRP_MN_COMPLETE_MDL (IRP_MN_COMPLETE | IRP_MN_MDL)
#define IRP_MN_COMPLETE_MDL_DPC (IRP_MN_COMPLETE_MDL | IRP_MN_DPC)
#define IRP_MN_SCSI_CLASS 0x01
#define IRP_MN_START_DEVICE 0x00
#define IRP_MN_QUERY_REMOVE_DEVICE 0x01
#define IRP_MN_REMOVE_DEVICE 0x02
#define IRP_MN_CANCEL_REMOVE_DEVICE 0x03
#define IRP_MN_STOP_DEVICE 0x04
#define IRP_MN_QUERY_STOP_DEVICE 0x05
#define IRP_MN_CANCEL_STOP_DEVICE 0x06
#define IRP_MN_QUERY_DEVICE_RELATIONS 0x07
#define IRP_MN_QUERY_INTERFACE 0x08
#define IRP_MN_QUERY_CAPABILITIES 0x09
#define IRP_MN_QUERY_RESOURCES 0x0A
#define IRP_MN_QUERY_RESOURCE_REQUIREMENTS 0x0B
#define IRP_MN_QUERY_DEVICE_TEXT 0x0C
#define IRP_MN_FILTER_RESOURCE_REQUIREMENTS 0x0D
#define IRP_MN_READ_CONFIG 0x0F
#define IRP_MN_WRITE_CONFIG 0x10
#define IRP_MN_EJECT 0x11
#define IRP_MN_SET_LOCK 0x12
#define IRP_MN_QUERY_ID 0x13
#define IRP_MN_QUERY_PNP_DEVICE_STATE 0x14
#define IRP_MN_QUERY_BUS_INFORMATION 0x15
#define IRP_MN_DEVICE_USAGE_NOTIFICATION 0x16
#define IRP_MN_SURPRISE_REMOVAL 0x17
#define IRP_MN_QUERY_LEGACY_BUS_INFORMATION 0x18
#define IRP_MN_WAIT_WAKE 0x00
#define IRP_MN_POWER_SEQUENCE 0x01
#define IRP_MN_SET_POWER 0x02
#define IRP_MN_QUERY_POWER 0x03
#define IRP_MN_QUERY_ALL_DATA 0x00
#define IRP_MN_QUERY_SINGLE_INSTANCE 0x01
#define IRP_MN_CHANGE_SINGLE_INSTANCE 0x02
#define IRP_MN_CHANGE_SINGLE_ITEM 0x03
#define IRP_MN_ENABLE_EVENTS 0x04
#define IRP_MN_DISABLE_EVENTS 0x05
#define IRP_MN_ENABLE_COLLECTION 0x06
#define IRP_MN_DISABLE_COLLECTION 0x07
#define IRP_MN_REGINFO 0x08
#define IRP_MN_EXECUTE_METHOD 0x09
#define IRP_MN_REGINFO_EX 0x0b
typedef
enum _IO_ALLOCATION_ACTION
{ KeepObject = 1,
DeallocateObject = 2,
DeallocateObjectKeepRegisters = 3
} IO_ALLOCATION_ACTION, *PIO_ALLOCATION_ACTION;
typedef IO_ALLOCATION_ACTION
(DDKAPI *PDRIVER_CONTROL)(
/*IN*/ struct _DEVICE_OBJECT *DeviceObject,
/*IN*/ struct _IRP *Irp,
/*IN*/ PVOID MapRegisterBase,
/*IN*/ PVOID Context
);
typedef VOID
(DDKAPI *PDRIVER_LIST_CONTROL)(
/*IN*/ struct _DEVICE_OBJECT *DeviceObject,
/*IN*/ struct _IRP *Irp,
/*IN*/ struct _SCATTER_GATHER_LIST *ScatterGather,
/*IN*/ PVOID Context
);
typedef NTSTATUS
(DDKAPI *PDRIVER_ADD_DEVICE)(
/*IN*/ struct _DRIVER_OBJECT *DriverObject,
/*IN*/ struct _DEVICE_OBJECT *PhysicalDeviceObject
);
typedef NTSTATUS
(DDKAPI *PIO_COMPLETION_ROUTINE)(
/*IN*/ struct _DEVICE_OBJECT *DeviceObject,
/*IN*/ struct _IRP *Irp,
/*IN*/ PVOID Context
);
typedef VOID
(DDKAPI *PDRIVER_CANCEL)(
/*IN*/ struct _DEVICE_OBJECT *DeviceObject,
/*IN*/ struct _IRP *Irp
);
typedef VOID
(DDKAPI *PKDEFERRED_ROUTINE)(
/*IN*/ struct _KDPC *Dpc,
/*IN*/ PVOID DeferredContext,
/*IN*/ PVOID SystemArgument1,
/*IN*/ PVOID SystemArgument2
);
typedef NTSTATUS
(DDKAPI *PDRIVER_DISPATCH)(
/*IN*/ struct _DEVICE_OBJECT *DeviceObject,
/*IN*/ struct _IRP *Irp
);
typedef VOID
(DDKAPI *PIO_DPC_ROUTINE)(
/*IN*/ struct _KDPC *Dpc,
/*IN*/ struct _DEVICE_OBJECT *DeviceObject,
/*IN*/ struct _IRP *Irp,
/*IN*/ PVOID Context
);
typedef NTSTATUS
(DDKAPI *PMM_DLL_INITIALIZE)(
/*IN*/ PUNICODE_STRING RegistryPath
);
typedef NTSTATUS
(DDKAPI *PMM_DLL_UNLOAD)( VOID );
typedef NTSTATUS
(DDKAPI *PDRIVER_ENTRY)(
/*IN*/ struct _DRIVER_OBJECT *DriverObject,
/*IN*/ PUNICODE_STRING RegistryPath
);
typedef NTSTATUS
(DDKAPI *PDRIVER_INITIALIZE)(
/*IN*/ struct _DRIVER_OBJECT *DriverObject,
/*IN*/ PUNICODE_STRING RegistryPath
);
typedef BOOLEAN
(DDKAPI *PKSERVICE_ROUTINE)(
/*IN*/ struct _KINTERRUPT *Interrupt,
/*IN*/ PVOID ServiceContext
);
typedef VOID
(DDKAPI *PIO_TIMER_ROUTINE)(
/*IN*/ struct _DEVICE_OBJECT *DeviceObject,
/*IN*/ PVOID Context
);
typedef VOID
(DDKAPI *PDRIVER_REINITIALIZE)(
/*IN*/ struct _DRIVER_OBJECT *DriverObject,
/*IN*/ PVOID Context,
/*IN*/ ULONG Count
);
typedef NTSTATUS
(DDKAPI *PDRIVER_STARTIO)(
/*IN*/ struct _DEVICE_OBJECT *DeviceObject,
/*IN*/ struct _IRP *Irp
);
typedef BOOLEAN
(DDKAPI *PKSYNCHRONIZE_ROUTINE)(
/*IN*/ PVOID SynchronizeContext
);
typedef VOID
(DDKAPI *PDRIVER_UNLOAD)(
/*IN*/ struct _DRIVER_OBJECT *DriverObject
);
/*
** Plug and Play structures
*/
typedef VOID DDKAPI
(*PINTERFACE_REFERENCE)(
PVOID Context
);
typedef VOID DDKAPI
(*PINTERFACE_DEREFERENCE)(
PVOID Context
);
typedef BOOLEAN DDKAPI
(*PTRANSLATE_BUS_ADDRESS)(
/*IN*/ PVOID Context,
/*IN*/ PHYSICAL_ADDRESS BusAddress,
/*IN*/ ULONG Length,
/*IN OUT*/ PULONG AddressSpace,
/*OUT*/ PPHYSICAL_ADDRESS TranslatedAddress
);
typedef struct _DMA_ADAPTER* DDKAPI
(*PGET_DMA_ADAPTER)(
/*IN*/ PVOID Context,
/*IN*/ struct _DEVICE_DESCRIPTION *DeviceDescriptor,
/*OUT*/ PULONG NumberOfMapRegisters
);
typedef ULONG DDKAPI
(*PGET_SET_DEVICE_DATA)(
/*IN*/ PVOID Context,
/*IN*/ ULONG DataType,
/*IN*/ PVOID Buffer,
/*IN*/ ULONG Offset,
/*IN*/ ULONG Length
);
typedef
union _POWER_STATE
{ SYSTEM_POWER_STATE SystemState;
DEVICE_POWER_STATE DeviceState;
} POWER_STATE, *PPOWER_STATE;
typedef
enum _POWER_STATE_TYPE
{ SystemPowerState,
DevicePowerState
} POWER_STATE_TYPE, *PPOWER_STATE_TYPE;
typedef
struct _BUS_INTERFACE_STANDARD
{ USHORT Size;
USHORT Version;
PVOID Context;
PINTERFACE_REFERENCE InterfaceReference;
PINTERFACE_DEREFERENCE InterfaceDereference;
PTRANSLATE_BUS_ADDRESS TranslateBusAddress;
PGET_DMA_ADAPTER GetDmaAdapter;
PGET_SET_DEVICE_DATA SetBusData;
PGET_SET_DEVICE_DATA GetBusData;
} BUS_INTERFACE_STANDARD, *PBUS_INTERFACE_STANDARD;
typedef
struct _DEVICE_CAPABILITIES
{ USHORT Size;
USHORT Version;
ULONG DeviceD1 : 1;
ULONG DeviceD2 : 1;
ULONG LockSupported : 1;
ULONG EjectSupported : 1;
ULONG Removable : 1;
ULONG DockDevice : 1;
ULONG UniqueID : 1;
ULONG SilentInstall : 1;
ULONG RawDeviceOK : 1;
ULONG SurpriseRemovalOK : 1;
ULONG WakeFromD0 : 1;
ULONG WakeFromD1 : 1;
ULONG WakeFromD2 : 1;
ULONG WakeFromD3 : 1;
ULONG HardwareDisabled : 1;
ULONG NonDynamic : 1;
ULONG WarmEjectSupported : 1;
ULONG NoDisplayInUI : 1;
ULONG Reserved : 14;
ULONG Address;
ULONG UINumber;
DEVICE_POWER_STATE DeviceState[PowerSystemMaximum];
SYSTEM_POWER_STATE SystemWake;
DEVICE_POWER_STATE DeviceWake;
ULONG D1Latency;
ULONG D2Latency;
ULONG D3Latency;
} DEVICE_CAPABILITIES, *PDEVICE_CAPABILITIES;
typedef
struct _DEVICE_INTERFACE_CHANGE_NOTIFICATION
{ USHORT Version;
USHORT Size;
GUID Event;
GUID InterfaceClassGuid;
PUNICODE_STRING SymbolicLinkName;
} DEVICE_INTERFACE_CHANGE_NOTIFICATION, *PDEVICE_INTERFACE_CHANGE_NOTIFICATION;
typedef
struct _HWPROFILE_CHANGE_NOTIFICATION
{ USHORT Version;
USHORT Size;
GUID Event;
} HWPROFILE_CHANGE_NOTIFICATION, *PHWPROFILE_CHANGE_NOTIFICATION;
#undef INTERFACE
typedef
struct _INTERFACE
{ USHORT Size;
USHORT Version;
PVOID Context;
PINTERFACE_REFERENCE InterfaceReference;
PINTERFACE_DEREFERENCE InterfaceDereference;
} INTERFACE, *PINTERFACE;
typedef
struct _PLUGPLAY_NOTIFICATION_HEADER
{ USHORT Version;
USHORT Size;
GUID Event;
} PLUGPLAY_NOTIFICATION_HEADER, *PPLUGPLAY_NOTIFICATION_HEADER;
typedef ULONG PNP_DEVICE_STATE, *PPNP_DEVICE_STATE;
/* PNP_DEVICE_STATE */
#define PNP_DEVICE_DISABLED 0x00000001
#define PNP_DEVICE_DONT_DISPLAY_IN_UI 0x00000002
#define PNP_DEVICE_FAILED 0x00000004
#define PNP_DEVICE_REMOVED 0x00000008
#define PNP_DEVICE_RESOURCE_REQUIREMENTS_CHANGED 0x00000010
#define PNP_DEVICE_NOT_DISABLEABLE 0x00000020
typedef
struct _TARGET_DEVICE_CUSTOM_NOTIFICATION
{ USHORT Version;
USHORT Size;
GUID Event;
struct _FILE_OBJECT *FileObject;
LONG NameBufferOffset;
UCHAR CustomDataBuffer[1];
} TARGET_DEVICE_CUSTOM_NOTIFICATION, *PTARGET_DEVICE_CUSTOM_NOTIFICATION;
typedef
struct _TARGET_DEVICE_REMOVAL_NOTIFICATION
{ USHORT Version;
USHORT Size;
GUID Event;
struct _FILE_OBJECT *FileObject;
} TARGET_DEVICE_REMOVAL_NOTIFICATION, *PTARGET_DEVICE_REMOVAL_NOTIFICATION;
typedef
enum _BUS_QUERY_ID_TYPE
{ BusQueryDeviceID,
BusQueryHardwareIDs,
BusQueryCompatibleIDs,
BusQueryInstanceID,
BusQueryDeviceSerialNumber
} BUS_QUERY_ID_TYPE, *PBUS_QUERY_ID_TYPE;
typedef
enum _DEVICE_TEXT_TYPE
{ DeviceTextDescription,
DeviceTextLocationInformation
} DEVICE_TEXT_TYPE, *PDEVICE_TEXT_TYPE;
typedef
enum _DEVICE_USAGE_NOTIFICATION_TYPE
{ DeviceUsageTypeUndefined,
DeviceUsageTypePaging,
DeviceUsageTypeHibernation,
DeviceUsageTypeDumpFile
} DEVICE_USAGE_NOTIFICATION_TYPE;
typedef
struct _POWER_SEQUENCE
{ ULONG SequenceD1;
ULONG SequenceD2;
ULONG SequenceD3;
} POWER_SEQUENCE, *PPOWER_SEQUENCE;
typedef enum
{ DevicePropertyDeviceDescription,
DevicePropertyHardwareID,
DevicePropertyCompatibleIDs,
DevicePropertyBootConfiguration,
DevicePropertyBootConfigurationTranslated,
DevicePropertyClassName,
DevicePropertyClassGuid,
DevicePropertyDriverKeyName,
DevicePropertyManufacturer,
DevicePropertyFriendlyName,
DevicePropertyLocationInformation,
DevicePropertyPhysicalDeviceObjectName,
DevicePropertyBusTypeGuid,
DevicePropertyLegacyBusType,
DevicePropertyBusNumber,
DevicePropertyEnumeratorName,
DevicePropertyAddress,
DevicePropertyUINumber,
DevicePropertyInstallState,
DevicePropertyRemovalPolicy
} DEVICE_REGISTRY_PROPERTY;
typedef
enum _IO_NOTIFICATION_EVENT_CATEGORY
{ EventCategoryReserved,
EventCategoryHardwareProfileChange,
EventCategoryDeviceInterfaceChange,
EventCategoryTargetDeviceChange
} IO_NOTIFICATION_EVENT_CATEGORY;
#define PNPNOTIFY_DEVICE_INTERFACE_INCLUDE_EXISTING_INTERFACES 0x00000001
typedef NTSTATUS DDKAPI
(*PDRIVER_NOTIFICATION_CALLBACK_ROUTINE)(
/*IN*/ PVOID NotificationStructure,
/*IN*/ PVOID Context
);
typedef VOID DDKAPI
(*PDEVICE_CHANGE_COMPLETE_CALLBACK)(
/*IN*/ PVOID Context
);
/* System structures
*/
#define SYMBOLIC_LINK_QUERY 0x0001
#define SYMBOLIC_LINK_ALL_ACCESS (STANDARD_RIGHTS_REQUIRED | 0x1)
#if 1
/* FIXME: also in winnt.h; hence already defined?
*/
#define DUPLICATE_CLOSE_SOURCE 0x00000001
#define DUPLICATE_SAME_ACCESS 0x00000002
#define DUPLICATE_SAME_ATTRIBUTES 0x00000004
#endif /* winnt.h */
typedef
struct _OBJECT_NAME_INFORMATION
{ UNICODE_STRING Name;
} OBJECT_NAME_INFORMATION, *POBJECT_NAME_INFORMATION;
typedef VOID DDKAPI
(*PIO_APC_ROUTINE)(
/*IN*/ PVOID ApcContext,
/*IN*/ PIO_STATUS_BLOCK IoStatusBlock,
/*IN*/ ULONG Reserved
);
typedef
struct _IO_STATUS_BLOCK
{ _ANONYMOUS_UNION union
{ NTSTATUS Status;
PVOID Pointer;
} DUMMYUNIONNAME;
ULONG_PTR Information;
} IO_STATUS_BLOCK;
typedef VOID DDKAPI
(*PKNORMAL_ROUTINE)(
/*IN*/ PVOID NormalContext,
/*IN*/ PVOID SystemArgument1,
/*IN*/ PVOID SystemArgument2
);
typedef VOID DDKAPI
(*PKKERNEL_ROUTINE)(
/*IN*/ struct _KAPC *Apc,
/*IN OUT*/ PKNORMAL_ROUTINE *NormalRoutine,
/*IN OUT*/ PVOID *NormalContext,
/*IN OUT*/ PVOID *SystemArgument1,
/*IN OUT*/ PVOID *SystemArgument2
);
typedef VOID DDKAPI
(*PKRUNDOWN_ROUTINE)(
/*IN*/ struct _KAPC *Apc
);
typedef BOOLEAN DDKAPI
(*PKTRANSFER_ROUTINE)( VOID );
typedef
struct _KAPC
{ CSHORT Type;
CSHORT Size;
ULONG Spare0;
struct _KTHREAD *Thread;
LIST_ENTRY ApcListEntry;
PKKERNEL_ROUTINE KernelRoutine;
PKRUNDOWN_ROUTINE RundownRoutine;
PKNORMAL_ROUTINE NormalRoutine;
PVOID NormalContext;
PVOID SystemArgument1;
PVOID SystemArgument2;
CCHAR ApcStateIndex;
KPROCESSOR_MODE ApcMode;
BOOLEAN Inserted;
} KAPC, *PKAPC, *RESTRICTED_POINTER PRKAPC;
typedef
struct _KDEVICE_QUEUE
{ CSHORT Type;
CSHORT Size;
LIST_ENTRY DeviceListHead;
KSPIN_LOCK Lock;
BOOLEAN Busy;
} KDEVICE_QUEUE, *PKDEVICE_QUEUE, *RESTRICTED_POINTER PRKDEVICE_QUEUE;
typedef
struct _KDEVICE_QUEUE_ENTRY
{ LIST_ENTRY DeviceListEntry;
ULONG SortKey;
BOOLEAN Inserted;
} KDEVICE_QUEUE_ENTRY, *PKDEVICE_QUEUE_ENTRY,
*RESTRICTED_POINTER PRKDEVICE_QUEUE_ENTRY;
#define LOCK_QUEUE_WAIT 1
#define LOCK_QUEUE_OWNER 2
typedef
enum _KSPIN_LOCK_QUEUE_NUMBER
{ LockQueueDispatcherLock,
LockQueueContextSwapLock,
LockQueuePfnLock,
LockQueueSystemSpaceLock,
LockQueueVacbLock,
LockQueueMasterLock,
LockQueueNonPagedPoolLock,
LockQueueIoCancelLock,
LockQueueWorkQueueLock,
LockQueueIoVpbLock,
LockQueueIoDatabaseLock,
LockQueueIoCompletionLock,
LockQueueNtfsStructLock,
LockQueueAfdWorkQueueLock,
LockQueueBcbLock,
LockQueueMaximumLock
} KSPIN_LOCK_QUEUE_NUMBER, *PKSPIN_LOCK_QUEUE_NUMBER;
typedef
struct _KSPIN_LOCK_QUEUE
{ struct _KSPIN_LOCK_QUEUE *VOLATILE Next;
PKSPIN_LOCK VOLATILE Lock;
} KSPIN_LOCK_QUEUE, *PKSPIN_LOCK_QUEUE;
typedef
struct _KLOCK_QUEUE_HANDLE
{ KSPIN_LOCK_QUEUE LockQueue;
KIRQL OldIrql;
} KLOCK_QUEUE_HANDLE, *PKLOCK_QUEUE_HANDLE;
typedef
struct _KDPC
{ CSHORT Type;
UCHAR Number;
UCHAR Importance;
LIST_ENTRY DpcListEntry;
PKDEFERRED_ROUTINE DeferredRoutine;
PVOID DeferredContext;
PVOID SystemArgument1;
PVOID SystemArgument2;
PULONG_PTR Lock;
} KDPC, *PKDPC, *RESTRICTED_POINTER PRKDPC;
typedef
struct _WAIT_CONTEXT_BLOCK
{ KDEVICE_QUEUE_ENTRY WaitQueueEntry;
struct _DRIVER_CONTROL *DeviceRoutine;
PVOID DeviceContext;
ULONG NumberOfMapRegisters;
PVOID DeviceObject;
PVOID CurrentIrp;
PKDPC BufferChainingDpc;
} WAIT_CONTEXT_BLOCK, *PWAIT_CONTEXT_BLOCK;
typedef
struct _DISPATCHER_HEADER
{ UCHAR Type;
UCHAR Absolute;
UCHAR Size;
UCHAR Inserted;
LONG SignalState;
LIST_ENTRY WaitListHead;
} DISPATCHER_HEADER, *PDISPATCHER_HEADER;
typedef
struct _KEVENT
{ DISPATCHER_HEADER Header;
} KEVENT, *PKEVENT, *RESTRICTED_POINTER PRKEVENT;
typedef
struct _KSEMAPHORE
{ DISPATCHER_HEADER Header;
LONG Limit;
} KSEMAPHORE, *PKSEMAPHORE, *RESTRICTED_POINTER PRKSEMAPHORE;
typedef
struct _FAST_MUTEX
{ LONG Count;
struct _KTHREAD *Owner;
ULONG Contention;
KEVENT Event;
ULONG OldIrql;
} FAST_MUTEX, *PFAST_MUTEX;
typedef
struct _KTIMER
{ DISPATCHER_HEADER Header;
ULARGE_INTEGER DueTime;
LIST_ENTRY TimerListEntry;
struct _KDPC *Dpc;
LONG Period;
} KTIMER, *PKTIMER, *RESTRICTED_POINTER PRKTIMER;
typedef
struct _KMUTANT
{ DISPATCHER_HEADER Header;
LIST_ENTRY MutantListEntry;
struct _KTHREAD *RESTRICTED_POINTER OwnerThread;
BOOLEAN Abandoned;
UCHAR ApcDisable;
} KMUTANT, *PKMUTANT, *RESTRICTED_POINTER PRKMUTANT, KMUTEX, *PKMUTEX, *RESTRICTED_POINTER PRKMUTEX;
typedef
enum _TIMER_TYPE
{ NotificationTimer,
SynchronizationTimer
} TIMER_TYPE;
typedef
enum _TIMER_INFORMATION_CLASS
{ TimerBasicInformation
} TIMER_INFORMATION_CLASS;
typedef
struct _TIMER_BASIC_INFORMATION
{ LARGE_INTEGER TimeRemaining;
BOOLEAN SignalState;
} TIMER_BASIC_INFORMATION, *PTIMER_BASIC_INFORMATION;
#define EVENT_INCREMENT 1
#define IO_NO_INCREMENT 0
#define IO_CD_ROM_INCREMENT 1
#define IO_DISK_INCREMENT 1
#define IO_KEYBOARD_INCREMENT 6
#define IO_MAILSLOT_INCREMENT 2
#define IO_MOUSE_INCREMENT 6
#define IO_NAMED_PIPE_INCREMENT 2
#define IO_NETWORK_INCREMENT 2
#define IO_PARALLEL_INCREMENT 1
#define IO_SERIAL_INCREMENT 2
#define IO_SOUND_INCREMENT 8
#define IO_VIDEO_INCREMENT 1
#define SEMAPHORE_INCREMENT 1
typedef
struct _IRP
{ CSHORT Type;
USHORT Size;
struct _MDL *MdlAddress;
ULONG Flags;
union
{ struct _IRP *MasterIrp;
LONG IrpCount;
PVOID SystemBuffer;
} AssociatedIrp;
LIST_ENTRY ThreadListEntry;
IO_STATUS_BLOCK IoStatus;
KPROCESSOR_MODE RequestorMode;
BOOLEAN PendingReturned;
CHAR StackCount;
CHAR CurrentLocation;
BOOLEAN Cancel;
KIRQL CancelIrql;
CCHAR ApcEnvironment;
UCHAR AllocationFlags;
PIO_STATUS_BLOCK UserIosb;
PKEVENT UserEvent;
union
{ struct
{ PIO_APC_ROUTINE UserApcRoutine;
PVOID UserApcContext;
} AsynchronousParameters;
LARGE_INTEGER AllocationSize;
} Overlay;
PDRIVER_CANCEL CancelRoutine;
PVOID UserBuffer;
union
{ struct
{ _ANONYMOUS_UNION union
{ KDEVICE_QUEUE_ENTRY DeviceQueueEntry;
_ANONYMOUS_STRUCT struct
{ PVOID DriverContext[4];
} DUMMYSTRUCTNAME;
} DUMMYUNIONNAME;
PETHREAD Thread;
PCHAR AuxiliaryBuffer;
_ANONYMOUS_STRUCT struct
{ LIST_ENTRY ListEntry;
_ANONYMOUS_UNION union
{ struct _IO_STACK_LOCATION *CurrentStackLocation;
ULONG PacketType;
} DUMMYUNIONNAME;
} DUMMYSTRUCTNAME;
struct _FILE_OBJECT *OriginalFileObject;
} Overlay;
KAPC Apc;
PVOID CompletionKey;
} Tail;
} IRP, *PIRP;
/* IRP.Flags
*/
#define SL_FORCE_ACCESS_CHECK 0x01
#define SL_OPEN_PAGING_FILE 0x02
#define SL_OPEN_TARGET_DIRECTORY 0x04
#define SL_CASE_SENSITIVE 0x80
#define SL_KEY_SPECIFIED 0x01
#define SL_OVERRIDE_VERIFY_VOLUME 0x02
#define SL_WRITE_THROUGH 0x04
#define SL_FT_SEQUENTIAL_WRITE 0x08
#define SL_FAIL_IMMEDIATELY 0x01
#define SL_EXCLUSIVE_LOCK 0x02
#define SL_RESTART_SCAN 0x01
#define SL_RETURN_SINGLE_ENTRY 0x02
#define SL_INDEX_SPECIFIED 0x04
#define SL_WATCH_TREE 0x01
#define SL_ALLOW_RAW_MOUNT 0x01
enum
{ IRP_NOCACHE = 0x0001,
IRP_PAGING_IO = 0x0002,
IRP_MOUNT_COMPLETION = 0x0002,
IRP_SYNCHRONOUS_API = 0x0004,
IRP_ASSOCIATED_IRP = 0x0008,
IRP_BUFFERED_IO = 0x0010,
IRP_DEALLOCATE_BUFFER = 0x0020,
IRP_INPUT_OPERATION = 0x0040,
IRP_SYNCHRONOUS_PAGING_IO = 0x0040,
IRP_CREATE_OPERATION = 0x0080,
IRP_READ_OPERATION = 0x0100,
IRP_WRITE_OPERATION = 0x0200,
IRP_CLOSE_OPERATION = 0x0400,
IRP_DEFER_IO_COMPLETION = 0x0800,
IRP_OB_QUERY_NAME = 0x1000,
IRP_HOLD_DEVICE_QUEUE = 0x2000,
IRP_RETRY_IO_COMPLETION = 0x4000
};
typedef
struct _BOOTDISK_INFORMATION
{ LONGLONG BootPartitionOffset;
LONGLONG SystemPartitionOffset;
ULONG BootDeviceSignature;
ULONG SystemDeviceSignature;
} BOOTDISK_INFORMATION, *PBOOTDISK_INFORMATION;
typedef
struct _BOOTDISK_INFORMATION_EX
{ LONGLONG BootPartitionOffset;
LONGLONG SystemPartitionOffset;
ULONG BootDeviceSignature;
ULONG SystemDeviceSignature;
GUID BootDeviceGuid;
GUID SystemDeviceGuid;
BOOLEAN BootDeviceIsGpt;
BOOLEAN SystemDeviceIsGpt;
} BOOTDISK_INFORMATION_EX, *PBOOTDISK_INFORMATION_EX;
typedef
struct _EISA_MEMORY_TYPE
{ UCHAR ReadWrite : 1;
UCHAR Cached : 1;
UCHAR Reserved0 : 1;
UCHAR Type : 2;
UCHAR Shared : 1;
UCHAR Reserved1 : 1;
UCHAR MoreEntries : 1;
} EISA_MEMORY_TYPE, *PEISA_MEMORY_TYPE;
#include <pshpack1.h>
typedef
struct _EISA_MEMORY_CONFIGURATION
{ EISA_MEMORY_TYPE ConfigurationByte;
UCHAR DataSize;
USHORT AddressLowWord;
UCHAR AddressHighByte;
USHORT MemorySize;
} EISA_MEMORY_CONFIGURATION, *PEISA_MEMORY_CONFIGURATION;
#include <poppack.h>
typedef
struct _EISA_IRQ_DESCRIPTOR
{ UCHAR Interrupt : 4;
UCHAR Reserved : 1;
UCHAR LevelTriggered : 1;
UCHAR Shared : 1;
UCHAR MoreEntries : 1;
} EISA_IRQ_DESCRIPTOR, *PEISA_IRQ_DESCRIPTOR;
typedef
struct _EISA_IRQ_CONFIGURATION
{ EISA_IRQ_DESCRIPTOR ConfigurationByte;
UCHAR Reserved;
} EISA_IRQ_CONFIGURATION, *PEISA_IRQ_CONFIGURATION;
typedef
struct _DMA_CONFIGURATION_BYTE0
{ UCHAR Channel : 3;
UCHAR Reserved : 3;
UCHAR Shared : 1;
UCHAR MoreEntries : 1;
} DMA_CONFIGURATION_BYTE0;
typedef
struct _DMA_CONFIGURATION_BYTE1
{ UCHAR Reserved0 : 2;
UCHAR TransferSize : 2;
UCHAR Timing : 2;
UCHAR Reserved1 : 2;
} DMA_CONFIGURATION_BYTE1;
typedef
struct _EISA_DMA_CONFIGURATION
{ DMA_CONFIGURATION_BYTE0 ConfigurationByte0;
DMA_CONFIGURATION_BYTE1 ConfigurationByte1;
} EISA_DMA_CONFIGURATION, *PEISA_DMA_CONFIGURATION;
#include <pshpack1.h>
typedef
struct _EISA_PORT_DESCRIPTOR
{ UCHAR NumberPorts : 5;
UCHAR Reserved : 1;
UCHAR Shared : 1;
UCHAR MoreEntries : 1;
} EISA_PORT_DESCRIPTOR, *PEISA_PORT_DESCRIPTOR;
typedef
struct _EISA_PORT_CONFIGURATION
{ EISA_PORT_DESCRIPTOR Configuration;
USHORT PortAddress;
} EISA_PORT_CONFIGURATION, *PEISA_PORT_CONFIGURATION;
#include <poppack.h>
typedef
struct _CM_EISA_FUNCTION_INFORMATION
{ ULONG CompressedId;
UCHAR IdSlotFlags1;
UCHAR IdSlotFlags2;
UCHAR MinorRevision;
UCHAR MajorRevision;
UCHAR Selections[26];
UCHAR FunctionFlags;
UCHAR TypeString[80];
EISA_MEMORY_CONFIGURATION EisaMemory[9];
EISA_IRQ_CONFIGURATION EisaIrq[7];
EISA_DMA_CONFIGURATION EisaDma[4];
EISA_PORT_CONFIGURATION EisaPort[20];
UCHAR InitializationData[60];
} CM_EISA_FUNCTION_INFORMATION, *PCM_EISA_FUNCTION_INFORMATION;
/* CM_EISA_FUNCTION_INFORMATION.FunctionFlags
*/
#define EISA_FUNCTION_ENABLED 0x80
#define EISA_FREE_FORM_DATA 0x40
#define EISA_HAS_PORT_INIT_ENTRY 0x20
#define EISA_HAS_PORT_RANGE 0x10
#define EISA_HAS_DMA_ENTRY 0x08
#define EISA_HAS_IRQ_ENTRY 0x04
#define EISA_HAS_MEMORY_ENTRY 0x02
#define EISA_HAS_TYPE_ENTRY 0x01
#define EISA_HAS_INFORMATION \
(EISA_HAS_PORT_RANGE + EISA_HAS_DMA_ENTRY + EISA_HAS_IRQ_ENTRY \
+ EISA_HAS_MEMORY_ENTRY + EISA_HAS_TYPE_ENTRY)
typedef
struct _CM_EISA_SLOT_INFORMATION
{ UCHAR ReturnCode;
UCHAR ReturnFlags;
UCHAR MajorRevision;
UCHAR MinorRevision;
USHORT Checksum;
UCHAR NumberFunctions;
UCHAR FunctionInformation;
ULONG CompressedId;
} CM_EISA_SLOT_INFORMATION, *PCM_EISA_SLOT_INFORMATION;
/* CM_EISA_SLOT_INFORMATION.ReturnCode
*/
#define EISA_INVALID_SLOT 0x80
#define EISA_INVALID_FUNCTION 0x81
#define EISA_INVALID_CONFIGURATION 0x82
#define EISA_EMPTY_SLOT 0x83
#define EISA_INVALID_BIOS_CALL 0x86
typedef
struct _CM_FLOPPY_DEVICE_DATA
{ USHORT Version;
USHORT Revision;
CHAR Size[8];
ULONG MaxDensity;
ULONG MountDensity;
UCHAR StepRateHeadUnloadTime;
UCHAR HeadLoadTime;
UCHAR MotorOffTime;
UCHAR SectorLengthCode;
UCHAR SectorPerTrack;
UCHAR ReadWriteGapLength;
UCHAR DataTransferLength;
UCHAR FormatGapLength;
UCHAR FormatFillCharacter;
UCHAR HeadSettleTime;
UCHAR MotorSettleTime;
UCHAR MaximumTrackValue;
UCHAR DataTransferRate;
} CM_FLOPPY_DEVICE_DATA, *PCM_FLOPPY_DEVICE_DATA;
typedef
enum _INTERFACE_TYPE
{ InterfaceTypeUndefined = -1,
Internal,
Isa,
Eisa,
MicroChannel,
TurboChannel,
PCIBus,
VMEBus,
NuBus,
PCMCIABus,
CBus,
MPIBus,
MPSABus,
ProcessorInternal,
InternalPowerBus,
PNPISABus,
PNPBus,
MaximumInterfaceType
} INTERFACE_TYPE, *PINTERFACE_TYPE;
typedef
struct _PNP_BUS_INFORMATION
{ GUID BusTypeGuid;
INTERFACE_TYPE LegacyBusType;
ULONG BusNumber;
} PNP_BUS_INFORMATION, *PPNP_BUS_INFORMATION;
#include <pshpack1.h>
typedef
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR
{ UCHAR Type;
UCHAR ShareDisposition;
USHORT Flags;
union
{ struct
{ PHYSICAL_ADDRESS Start;
ULONG Length;
} Generic;
struct
{ PHYSICAL_ADDRESS Start;
ULONG Length;
} Port;
struct
{ ULONG Level;
ULONG Vector;
ULONG Affinity;
} Interrupt;
struct
{ PHYSICAL_ADDRESS Start;
ULONG Length;
} Memory;
struct
{ ULONG Channel;
ULONG Port;
ULONG Reserved1;
} Dma;
struct
{ ULONG Data[3];
} DevicePrivate;
struct
{ ULONG Start;
ULONG Length;
ULONG Reserved;
} BusNumber;
struct
{ ULONG DataSize;
ULONG Reserved1;
ULONG Reserved2;
} DeviceSpecificData;
} u;
} CM_PARTIAL_RESOURCE_DESCRIPTOR, *PCM_PARTIAL_RESOURCE_DESCRIPTOR;
/* CM_PARTIAL_RESOURCE_DESCRIPTOR.Type
*/
#define CmResourceTypeNull 0
#define CmResourceTypePort 1
#define CmResourceTypeInterrupt 2
#define CmResourceTypeMemory 3
#define CmResourceTypeDma 4
#define CmResourceTypeDeviceSpecific 5
#define CmResourceTypeBusNumber 6
#define CmResourceTypeMaximum 7
#define CmResourceTypeNonArbitrated 128
#define CmResourceTypeConfigData 128
#define CmResourceTypeDevicePrivate 129
#define CmResourceTypePcCardConfig 130
#define CmResourceTypeMfCardConfig 131
/* CM_PARTIAL_RESOURCE_DESCRIPTOR.ShareDisposition
*/
typedef
enum _CM_SHARE_DISPOSITION
{ CmResourceShareUndetermined,
CmResourceShareDeviceExclusive,
CmResourceShareDriverExclusive,
CmResourceShareShared
} CM_SHARE_DISPOSITION;
/* CM_PARTIAL_RESOURCE_DESCRIPTOR.Flags if Type = CmResourceTypePort
*/
#define CM_RESOURCE_PORT_MEMORY 0x0000
#define CM_RESOURCE_PORT_IO 0x0001
#define CM_RESOURCE_PORT_10_BIT_DECODE 0x0004
#define CM_RESOURCE_PORT_12_BIT_DECODE 0x0008
#define CM_RESOURCE_PORT_16_BIT_DECODE 0x0010
#define CM_RESOURCE_PORT_POSITIVE_DECODE 0x0020
#define CM_RESOURCE_PORT_PASSIVE_DECODE 0x0040
#define CM_RESOURCE_PORT_WINDOW_DECODE 0x0080
/* CM_PARTIAL_RESOURCE_DESCRIPTOR.Flags if Type = CmResourceTypeInterrupt
*/
#define CM_RESOURCE_INTERRUPT_LEVEL_SENSITIVE 0x0000
#define CM_RESOURCE_INTERRUPT_LATCHED 0x0001
/* CM_PARTIAL_RESOURCE_DESCRIPTOR.Flags if Type = CmResourceTypeMemory
*/
#define CM_RESOURCE_MEMORY_READ_WRITE 0x0000
#define CM_RESOURCE_MEMORY_READ_ONLY 0x0001
#define CM_RESOURCE_MEMORY_WRITE_ONLY 0x0002
#define CM_RESOURCE_MEMORY_PREFETCHABLE 0x0004
#define CM_RESOURCE_MEMORY_COMBINEDWRITE 0x0008
#define CM_RESOURCE_MEMORY_24 0x0010
#define CM_RESOURCE_MEMORY_CACHEABLE 0x0020
/* CM_PARTIAL_RESOURCE_DESCRIPTOR.Flags if Type = CmResourceTypeDma
*/
#define CM_RESOURCE_DMA_8 0x0000
#define CM_RESOURCE_DMA_16 0x0001
#define CM_RESOURCE_DMA_32 0x0002
#define CM_RESOURCE_DMA_8_AND_16 0x0004
#define CM_RESOURCE_DMA_BUS_MASTER 0x0008
#define CM_RESOURCE_DMA_TYPE_A 0x0010
#define CM_RESOURCE_DMA_TYPE_B 0x0020
#define CM_RESOURCE_DMA_TYPE_F 0x0040
typedef
struct _CM_PARTIAL_RESOURCE_LIST
{ USHORT Version;
USHORT Revision;
ULONG Count;
CM_PARTIAL_RESOURCE_DESCRIPTOR PartialDescriptors[1];
} CM_PARTIAL_RESOURCE_LIST, *PCM_PARTIAL_RESOURCE_LIST;
typedef
struct _CM_FULL_RESOURCE_DESCRIPTOR
{ INTERFACE_TYPE InterfaceType;
ULONG BusNumber;
CM_PARTIAL_RESOURCE_LIST PartialResourceList;
} CM_FULL_RESOURCE_DESCRIPTOR, *PCM_FULL_RESOURCE_DESCRIPTOR;
typedef
struct _CM_RESOURCE_LIST
{ ULONG Count;
CM_FULL_RESOURCE_DESCRIPTOR List[1];
} CM_RESOURCE_LIST, *PCM_RESOURCE_LIST;
typedef
struct _CM_INT13_DRIVE_PARAMETER
{ USHORT DriveSelect;
ULONG MaxCylinders;
USHORT SectorsPerTrack;
USHORT MaxHeads;
USHORT NumberDrives;
} CM_INT13_DRIVE_PARAMETER, *PCM_INT13_DRIVE_PARAMETER;
#include <poppack.h>
typedef
struct _CM_KEYBOARD_DEVICE_DATA
{ USHORT Version;
USHORT Revision;
UCHAR Type;
UCHAR Subtype;
USHORT KeyboardFlags;
} CM_KEYBOARD_DEVICE_DATA, *PCM_KEYBOARD_DEVICE_DATA;
#define KEYBOARD_INSERT_ON 0x80
#define KEYBOARD_CAPS_LOCK_ON 0x40
#define KEYBOARD_NUM_LOCK_ON 0x20
#define KEYBOARD_SCROLL_LOCK_ON 0x10
#define KEYBOARD_ALT_KEY_DOWN 0x08
#define KEYBOARD_CTRL_KEY_DOWN 0x04
#define KEYBOARD_LEFT_SHIFT_DOWN 0x02
#define KEYBOARD_RIGHT_SHIFT_DOWN 0x01
typedef
struct _CM_MCA_POS_DATA
{ USHORT AdapterId;
UCHAR PosData1;
UCHAR PosData2;
UCHAR PosData3;
UCHAR PosData4;
} CM_MCA_POS_DATA, *PCM_MCA_POS_DATA;
typedef
struct CM_Power_Data_s
{ ULONG PD_Size;
DEVICE_POWER_STATE PD_MostRecentPowerState;
ULONG PD_Capabilities;
ULONG PD_D1Latency;
ULONG PD_D2Latency;
ULONG PD_D3Latency;
DEVICE_POWER_STATE PD_PowerStateMapping[PowerSystemMaximum];
} CM_POWER_DATA, *PCM_POWER_DATA;
#define PDCAP_D0_SUPPORTED 0x00000001
#define PDCAP_D1_SUPPORTED 0x00000002
#define PDCAP_D2_SUPPORTED 0x00000004
#define PDCAP_D3_SUPPORTED 0x00000008
#define PDCAP_WAKE_FROM_D0_SUPPORTED 0x00000010
#define PDCAP_WAKE_FROM_D1_SUPPORTED 0x00000020
#define PDCAP_WAKE_FROM_D2_SUPPORTED 0x00000040
#define PDCAP_WAKE_FROM_D3_SUPPORTED 0x00000080
#define PDCAP_WARM_EJECT_SUPPORTED 0x00000100
typedef
struct _CM_SCSI_DEVICE_DATA
{ USHORT Version;
USHORT Revision;
UCHAR HostIdentifier;
} CM_SCSI_DEVICE_DATA, *PCM_SCSI_DEVICE_DATA;
typedef
struct _CM_SERIAL_DEVICE_DATA
{ USHORT Version;
USHORT Revision;
ULONG BaudClock;
} CM_SERIAL_DEVICE_DATA, *PCM_SERIAL_DEVICE_DATA;
/* IO_RESOURCE_DESCRIPTOR.Option
*/
#define IO_RESOURCE_PREFERRED 0x01
#define IO_RESOURCE_DEFAULT 0x02
#define IO_RESOURCE_ALTERNATIVE 0x08
typedef
struct _IO_RESOURCE_DESCRIPTOR
{ UCHAR Option;
UCHAR Type;
UCHAR ShareDisposition;
UCHAR Spare1;
USHORT Flags;
USHORT Spare2;
union
{ struct
{ ULONG Length;
ULONG Alignment;
PHYSICAL_ADDRESS MinimumAddress;
PHYSICAL_ADDRESS MaximumAddress;
} Port;
struct
{ ULONG Length;
ULONG Alignment;
PHYSICAL_ADDRESS MinimumAddress;
PHYSICAL_ADDRESS MaximumAddress;
} Memory;
struct
{ ULONG MinimumVector;
ULONG MaximumVector;
} Interrupt;
struct
{ ULONG MinimumChannel;
ULONG MaximumChannel;
} Dma;
struct
{ ULONG Length;
ULONG Alignment;
PHYSICAL_ADDRESS MinimumAddress;
PHYSICAL_ADDRESS MaximumAddress;
} Generic;
struct
{ ULONG Data[3];
} DevicePrivate;
struct
{ ULONG Length;
ULONG MinBusNumber;
ULONG MaxBusNumber;
ULONG Reserved;
} BusNumber;
struct
{ ULONG Priority;
ULONG Reserved1;
ULONG Reserved2;
} ConfigData;
} u;
} IO_RESOURCE_DESCRIPTOR, *PIO_RESOURCE_DESCRIPTOR;
typedef
struct _IO_RESOURCE_LIST
{ USHORT Version;
USHORT Revision;
ULONG Count;
IO_RESOURCE_DESCRIPTOR Descriptors[1];
} IO_RESOURCE_LIST, *PIO_RESOURCE_LIST;
typedef
struct _IO_RESOURCE_REQUIREMENTS_LIST
{ ULONG ListSize;
INTERFACE_TYPE InterfaceType;
ULONG BusNumber;
ULONG SlotNumber;
ULONG Reserved[3];
ULONG AlternativeLists;
IO_RESOURCE_LIST List[1];
} IO_RESOURCE_REQUIREMENTS_LIST, *PIO_RESOURCE_REQUIREMENTS_LIST;
typedef
struct _CONTROLLER_OBJECT
{ CSHORT Type;
CSHORT Size;
PVOID ControllerExtension;
KDEVICE_QUEUE DeviceWaitQueue;
ULONG Spare1;
LARGE_INTEGER Spare2;
} CONTROLLER_OBJECT, *PCONTROLLER_OBJECT;
typedef
enum _DMA_WIDTH
{ Width8Bits,
Width16Bits,
Width32Bits,
MaximumDmaWidth
} DMA_WIDTH, *PDMA_WIDTH;
typedef
enum _DMA_SPEED
{ Compatible,
TypeA,
TypeB,
TypeC,
TypeF,
MaximumDmaSpeed
} DMA_SPEED, *PDMA_SPEED;
/* DEVICE_DESCRIPTION.Version
*/
#define DEVICE_DESCRIPTION_VERSION 0x0000
#define DEVICE_DESCRIPTION_VERSION1 0x0001
#define DEVICE_DESCRIPTION_VERSION2 0x0002
typedef
struct _DEVICE_DESCRIPTION
{ ULONG Version;
BOOLEAN Master;
BOOLEAN ScatterGather;
BOOLEAN DemandMode;
BOOLEAN AutoInitialize;
BOOLEAN Dma32BitAddresses;
BOOLEAN IgnoreCount;
BOOLEAN Reserved1;
BOOLEAN Dma64BitAddresses;
ULONG BusNumber;
ULONG DmaChannel;
INTERFACE_TYPE InterfaceType;
DMA_WIDTH DmaWidth;
DMA_SPEED DmaSpeed;
ULONG MaximumLength;
ULONG DmaPort;
} DEVICE_DESCRIPTION, *PDEVICE_DESCRIPTION;
/* VPB.Flags */
#define VPB_MOUNTED 0x0001
#define VPB_LOCKED 0x0002
#define VPB_PERSISTENT 0x0004
#define VPB_REMOVE_PENDING 0x0008
#define VPB_RAW_MOUNT 0x0010
#define MAXIMUM_VOLUME_LABEL_LENGTH (32 * sizeof(WCHAR))
typedef
struct _VPB
{ CSHORT Type;
CSHORT Size;
USHORT Flags;
USHORT VolumeLabelLength;
struct _DEVICE_OBJECT *DeviceObject;
struct _DEVICE_OBJECT *RealDevice;
ULONG SerialNumber;
ULONG ReferenceCount;
WCHAR VolumeLabel[MAXIMUM_VOLUME_LABEL_LENGTH / sizeof(WCHAR)];
} VPB, *PVPB;
/* DEVICE_OBJECT.Flags
*/
#define DO_VERIFY_VOLUME 0x00000002
#define DO_BUFFERED_IO 0x00000004
#define DO_EXCLUSIVE 0x00000008
#define DO_DIRECT_IO 0x00000010
#define DO_MAP_IO_BUFFER 0x00000020
#define DO_DEVICE_HAS_NAME 0x00000040
#define DO_DEVICE_INITIALIZING 0x00000080
#define DO_SYSTEM_BOOT_PARTITION 0x00000100
#define DO_LONG_TERM_REQUESTS 0x00000200
#define DO_NEVER_LAST_DEVICE 0x00000400
#define DO_SHUTDOWN_REGISTERED 0x00000800
#define DO_BUS_ENUMERATED_DEVICE 0x00001000
#define DO_POWER_PAGABLE 0x00002000
#define DO_POWER_INRUSH 0x00004000
#define DO_LOW_PRIORITY_FILESYSTEM 0x00010000
/* DEVICE_OBJECT.Characteristics
*/
#define FILE_REMOVABLE_MEDIA 0x00000001
#define FILE_READ_ONLY_DEVICE 0x00000002
#define FILE_FLOPPY_DISKETTE 0x00000004
#define FILE_WRITE_ONCE_MEDIA 0x00000008
#define FILE_REMOTE_DEVICE 0x00000010
#define FILE_DEVICE_IS_MOUNTED 0x00000020
#define FILE_VIRTUAL_VOLUME 0x00000040
#define FILE_AUTOGENERATED_DEVICE_NAME 0x00000080
#define FILE_DEVICE_SECURE_OPEN 0x00000100
/* DEVICE_OBJECT.AlignmentRequirement
*/
#define FILE_BYTE_ALIGNMENT 0x00000000
#define FILE_WORD_ALIGNMENT 0x00000001
#define FILE_LONG_ALIGNMENT 0x00000003
#define FILE_QUAD_ALIGNMENT 0x00000007
#define FILE_OCTA_ALIGNMENT 0x0000000f
#define FILE_32_BYTE_ALIGNMENT 0x0000001f
#define FILE_64_BYTE_ALIGNMENT 0x0000003f
#define FILE_128_BYTE_ALIGNMENT 0x0000007f
#define FILE_256_BYTE_ALIGNMENT 0x000000ff
#define FILE_512_BYTE_ALIGNMENT 0x000001ff
/* DEVICE_OBJECT.DeviceType
*/
typedef
struct _DEVICE_OBJECT
{ CSHORT Type;
USHORT Size;
LONG ReferenceCount;
struct _DRIVER_OBJECT *DriverObject;
struct _DEVICE_OBJECT *NextDevice;
struct _DEVICE_OBJECT *AttachedDevice;
struct _IRP *CurrentIrp;
PIO_TIMER Timer;
ULONG Flags;
ULONG Characteristics;
PVPB Vpb;
PVOID DeviceExtension;
DEVICE_TYPE DeviceType;
CCHAR StackSize;
union
{ LIST_ENTRY ListEntry;
WAIT_CONTEXT_BLOCK Wcb;
} Queue;
ULONG AlignmentRequirement;
KDEVICE_QUEUE DeviceQueue;
KDPC Dpc;
ULONG ActiveThreadCount;
PSECURITY_DESCRIPTOR SecurityDescriptor;
KEVENT DeviceLock;
USHORT SectorSize;
USHORT Spare1;
struct _DEVOBJ_EXTENSION *DeviceObjectExtension;
PVOID Reserved;
} DEVICE_OBJECT, *PDEVICE_OBJECT;
typedef
enum _DEVICE_RELATION_TYPE
{ BusRelations,
EjectionRelations,
PowerRelations,
RemovalRelations,
TargetDeviceRelation,
SingleBusRelations
} DEVICE_RELATION_TYPE, *PDEVICE_RELATION_TYPE;
typedef
struct _DEVICE_RELATIONS
{ ULONG Count;
PDEVICE_OBJECT Objects[1];
} DEVICE_RELATIONS, *PDEVICE_RELATIONS;
typedef
struct _SCATTER_GATHER_ELEMENT
{ PHYSICAL_ADDRESS Address;
ULONG Length;
ULONG_PTR Reserved;
} SCATTER_GATHER_ELEMENT, *PSCATTER_GATHER_ELEMENT;
typedef
struct _SCATTER_GATHER_LIST
{ ULONG NumberOfElements;
ULONG_PTR Reserved;
SCATTER_GATHER_ELEMENT Elements[0];
} SCATTER_GATHER_LIST, *PSCATTER_GATHER_LIST;
typedef
struct _MDL
{ struct _MDL *Next;
CSHORT Size;
CSHORT MdlFlags;
struct _EPROCESS *Process;
PVOID MappedSystemVa;
PVOID StartVa;
ULONG ByteCount;
ULONG ByteOffset;
} MDL, *PMDL;
#define MDL_MAPPED_TO_SYSTEM_VA 0x0001
#define MDL_PAGES_LOCKED 0x0002
#define MDL_SOURCE_IS_NONPAGED_POOL 0x0004
#define MDL_ALLOCATED_FIXED_SIZE 0x0008
#define MDL_PARTIAL 0x0010
#define MDL_PARTIAL_HAS_BEEN_MAPPED 0x0020
#define MDL_IO_PAGE_READ 0x0040
#define MDL_WRITE_OPERATION 0x0080
#define MDL_PARENT_MAPPED_SYSTEM_VA 0x0100
#define MDL_FREE_EXTRA_PTES 0x0200
#define MDL_IO_SPACE 0x0800
#define MDL_NETWORK_HEADER 0x1000
#define MDL_MAPPING_CAN_FAIL 0x2000
#define MDL_ALLOCATED_MUST_SUCCEED 0x4000
#define MDL_MAPPING_FLAGS ( \
MDL_MAPPED_TO_SYSTEM_VA | \
MDL_PAGES_LOCKED | \
MDL_SOURCE_IS_NONPAGED_POOL | \
MDL_PARTIAL_HAS_BEEN_MAPPED | \
MDL_PARENT_MAPPED_SYSTEM_VA | \
MDL_SYSTEM_VA | \
MDL_IO_SPACE)
typedef VOID DDKAPI
(*PPUT_DMA_ADAPTER)(
/*IN*/ PDMA_ADAPTER DmaAdapter);
typedef PVOID DDKAPI
(*PALLOCATE_COMMON_BUFFER)(
/*IN*/ PDMA_ADAPTER DmaAdapter,
/*IN*/ ULONG Length,
/*OUT*/ PPHYSICAL_ADDRESS LogicalAddress,
/*IN*/ BOOLEAN CacheEnabled);
typedef VOID DDKAPI
(*PFREE_COMMON_BUFFER)(
/*IN*/ PDMA_ADAPTER DmaAdapter,
/*IN*/ ULONG Length,
/*IN*/ PHYSICAL_ADDRESS LogicalAddress,
/*IN*/ PVOID VirtualAddress,
/*IN*/ BOOLEAN CacheEnabled);
typedef NTSTATUS DDKAPI
(*PALLOCATE_ADAPTER_CHANNEL)(
/*IN*/ PDMA_ADAPTER DmaAdapter,
/*IN*/ PDEVICE_OBJECT DeviceObject,
/*IN*/ ULONG NumberOfMapRegisters,
/*IN*/ PDRIVER_CONTROL ExecutionRoutine,
/*IN*/ PVOID Context);
typedef BOOLEAN DDKAPI
(*PFLUSH_ADAPTER_BUFFERS)(
/*IN*/ PDMA_ADAPTER DmaAdapter,
/*IN*/ PMDL Mdl,
/*IN*/ PVOID MapRegisterBase,
/*IN*/ PVOID CurrentVa,
/*IN*/ ULONG Length,
/*IN*/ BOOLEAN WriteToDevice);
typedef VOID DDKAPI
(*PFREE_ADAPTER_CHANNEL)(
/*IN*/ PDMA_ADAPTER DmaAdapter);
typedef VOID DDKAPI
(*PFREE_MAP_REGISTERS)(
/*IN*/ PDMA_ADAPTER DmaAdapter,
PVOID MapRegisterBase,
ULONG NumberOfMapRegisters);
typedef PHYSICAL_ADDRESS DDKAPI
(*PMAP_TRANSFER)(
/*IN*/ PDMA_ADAPTER DmaAdapter,
/*IN*/ PMDL Mdl,
/*IN*/ PVOID MapRegisterBase,
/*IN*/ PVOID CurrentVa,
/*IN OUT*/ PULONG Length,
/*IN*/ BOOLEAN WriteToDevice);
typedef ULONG DDKAPI
(*PGET_DMA_ALIGNMENT)(
/*IN*/ PDMA_ADAPTER DmaAdapter);
typedef ULONG DDKAPI
(*PREAD_DMA_COUNTER)(
/*IN*/ PDMA_ADAPTER DmaAdapter);
typedef NTSTATUS DDKAPI
(*PGET_SCATTER_GATHER_LIST)(
/*IN*/ PDMA_ADAPTER DmaAdapter,
/*IN*/ PDEVICE_OBJECT DeviceObject,
/*IN*/ PMDL Mdl,
/*IN*/ PVOID CurrentVa,
/*IN*/ ULONG Length,
/*IN*/ PDRIVER_LIST_CONTROL ExecutionRoutine,
/*IN*/ PVOID Context,
/*IN*/ BOOLEAN WriteToDevice);
typedef VOID DDKAPI
(*PPUT_SCATTER_GATHER_LIST)(
/*IN*/ PDMA_ADAPTER DmaAdapter,
/*IN*/ PSCATTER_GATHER_LIST ScatterGather,
/*IN*/ BOOLEAN WriteToDevice);
typedef NTSTATUS DDKAPI
(*PCALCULATE_SCATTER_GATHER_LIST_SIZE)(
/*IN*/ PDMA_ADAPTER DmaAdapter,
/*IN*/ PMDL Mdl /*OPTIONAL*/,
/*IN*/ PVOID CurrentVa,
/*IN*/ ULONG Length,
/*OUT*/ PULONG ScatterGatherListSize,
/*OUT*/ PULONG pNumberOfMapRegisters /*OPTIONAL*/);
typedef NTSTATUS DDKAPI
(*PBUILD_SCATTER_GATHER_LIST)(
/*IN*/ PDMA_ADAPTER DmaAdapter,
/*IN*/ PDEVICE_OBJECT DeviceObject,
/*IN*/ PMDL Mdl,
/*IN*/ PVOID CurrentVa,
/*IN*/ ULONG Length,
/*IN*/ PDRIVER_LIST_CONTROL ExecutionRoutine,
/*IN*/ PVOID Context,
/*IN*/ BOOLEAN WriteToDevice,
/*IN*/ PVOID ScatterGatherBuffer,
/*IN*/ ULONG ScatterGatherLength);
typedef NTSTATUS DDKAPI
(*PBUILD_MDL_FROM_SCATTER_GATHER_LIST)(
/*IN*/ PDMA_ADAPTER DmaAdapter,
/*IN*/ PSCATTER_GATHER_LIST ScatterGather,
/*IN*/ PMDL OriginalMdl,
/*OUT*/ PMDL *TargetMdl);
typedef
struct _DMA_OPERATIONS
{ ULONG Size;
PPUT_DMA_ADAPTER PutDmaAdapter;
PALLOCATE_COMMON_BUFFER AllocateCommonBuffer;
PFREE_COMMON_BUFFER FreeCommonBuffer;
PALLOCATE_ADAPTER_CHANNEL AllocateAdapterChannel;
PFLUSH_ADAPTER_BUFFERS FlushAdapterBuffers;
PFREE_ADAPTER_CHANNEL FreeAdapterChannel;
PFREE_MAP_REGISTERS FreeMapRegisters;
PMAP_TRANSFER MapTransfer;
PGET_DMA_ALIGNMENT GetDmaAlignment;
PREAD_DMA_COUNTER ReadDmaCounter;
PGET_SCATTER_GATHER_LIST GetScatterGatherList;
PPUT_SCATTER_GATHER_LIST PutScatterGatherList;
PCALCULATE_SCATTER_GATHER_LIST_SIZE CalculateScatterGatherList;
PBUILD_SCATTER_GATHER_LIST BuildScatterGatherList;
PBUILD_MDL_FROM_SCATTER_GATHER_LIST BuildMdlFromScatterGatherList;
} DMA_OPERATIONS, *PDMA_OPERATIONS;
typedef
struct _DMA_ADAPTER
{ USHORT Version;
USHORT Size;
PDMA_OPERATIONS DmaOperations;
} DMA_ADAPTER;
typedef
enum _FILE_INFORMATION_CLASS
{ FileDirectoryInformation = 1,
FileFullDirectoryInformation,
FileBothDirectoryInformation,
FileBasicInformation,
FileStandardInformation,
FileInternalInformation,
FileEaInformation,
FileAccessInformation,
FileNameInformation,
FileRenameInformation,
FileLinkInformation,
FileNamesInformation,
FileDispositionInformation,
FilePositionInformation,
FileFullEaInformation,
FileModeInformation,
FileAlignmentInformation,
FileAllInformation,
FileAllocationInformation,
FileEndOfFileInformation,
FileAlternateNameInformation,
FileStreamInformation,
FilePipeInformation,
FilePipeLocalInformation,
FilePipeRemoteInformation,
FileMailslotQueryInformation,
FileMailslotSetInformation,
FileCompressionInformation,
FileObjectIdInformation,
FileCompletionInformation,
FileMoveClusterInformation,
FileQuotaInformation,
FileReparsePointInformation,
FileNetworkOpenInformation,
FileAttributeTagInformation,
FileTrackingInformation,
FileIdBothDirectoryInformation,
FileIdFullDirectoryInformation,
FileValidDataLengthInformation,
FileShortNameInformation,
FileMaximumInformation
} FILE_INFORMATION_CLASS, *PFILE_INFORMATION_CLASS;
typedef
struct _FILE_POSITION_INFORMATION
{ LARGE_INTEGER CurrentByteOffset;
} FILE_POSITION_INFORMATION, *PFILE_POSITION_INFORMATION;
typedef
struct _FILE_ALIGNMENT_INFORMATION
{ ULONG AlignmentRequirement;
} FILE_ALIGNMENT_INFORMATION;
typedef
struct _FILE_NAME_INFORMATION
{ ULONG FileNameLength;
WCHAR FileName[1];
} FILE_NAME_INFORMATION, *PFILE_NAME_INFORMATION;
typedef
struct _FILE_BASIC_INFORMATION
{ LARGE_INTEGER CreationTime;
LARGE_INTEGER LastAccessTime;
LARGE_INTEGER LastWriteTime;
LARGE_INTEGER ChangeTime;
ULONG FileAttributes;
} FILE_BASIC_INFORMATION, *PFILE_BASIC_INFORMATION;
typedef
struct _FILE_STANDARD_INFORMATION
{ LARGE_INTEGER AllocationSize;
LARGE_INTEGER EndOfFile;
ULONG NumberOfLinks;
BOOLEAN DeletePending;
BOOLEAN Directory;
} FILE_STANDARD_INFORMATION, *PFILE_STANDARD_INFORMATION;
typedef
struct _FILE_NETWORK_OPEN_INFORMATION
{ LARGE_INTEGER CreationTime;
LARGE_INTEGER LastAccessTime;
LARGE_INTEGER LastWriteTime;
LARGE_INTEGER ChangeTime;
LARGE_INTEGER AllocationSize;
LARGE_INTEGER EndOfFile;
ULONG FileAttributes;
} FILE_NETWORK_OPEN_INFORMATION, *PFILE_NETWORK_OPEN_INFORMATION;
typedef
struct _FILE_ATTRIBUTE_TAG_INFORMATION
{ ULONG FileAttributes;
ULONG ReparseTag;
} FILE_ATTRIBUTE_TAG_INFORMATION, *PFILE_ATTRIBUTE_TAG_INFORMATION;
typedef
struct _FILE_DISPOSITION_INFORMATION
{ BOOLEAN DoDeleteFile;
} FILE_DISPOSITION_INFORMATION, *PFILE_DISPOSITION_INFORMATION;
typedef
struct _FILE_END_OF_FILE_INFORMATION
{ LARGE_INTEGER EndOfFile;
} FILE_END_OF_FILE_INFORMATION, *PFILE_END_OF_FILE_INFORMATION;
typedef
struct _FILE_VALID_DATA_LENGTH_INFORMATION
{ LARGE_INTEGER ValidDataLength;
} FILE_VALID_DATA_LENGTH_INFORMATION, *PFILE_VALID_DATA_LENGTH_INFORMATION;
typedef
enum _FSINFOCLASS
{ FileFsVolumeInformation = 1,
FileFsLabelInformation,
FileFsSizeInformation,
FileFsDeviceInformation,
FileFsAttributeInformation,
FileFsControlInformation,
FileFsFullSizeInformation,
FileFsObjectIdInformation,
FileFsDriverPathInformation,
FileFsMaximumInformation
} FS_INFORMATION_CLASS, *PFS_INFORMATION_CLASS;
typedef
struct _FILE_FS_DEVICE_INFORMATION
{ DEVICE_TYPE DeviceType;
ULONG Characteristics;
} FILE_FS_DEVICE_INFORMATION, *PFILE_FS_DEVICE_INFORMATION;
typedef
struct _FILE_FULL_EA_INFORMATION
{ ULONG NextEntryOffset;
UCHAR Flags;
UCHAR EaNameLength;
USHORT EaValueLength;
CHAR EaName[1];
} FILE_FULL_EA_INFORMATION, *PFILE_FULL_EA_INFORMATION;
typedef ULONG_PTR ERESOURCE_THREAD;
typedef ERESOURCE_THREAD *PERESOURCE_THREAD;
typedef
struct _OWNER_ENTRY
{ ERESOURCE_THREAD OwnerThread;
_ANONYMOUS_UNION union
{ LONG OwnerCount;
ULONG TableSize;
} DUMMYUNIONNAME;
} OWNER_ENTRY, *POWNER_ENTRY;
/* ERESOURCE.Flag
*/
#define ResourceNeverExclusive 0x0010
#define ResourceReleaseByOtherThread 0x0020
#define ResourceOwnedExclusive 0x0080
#define RESOURCE_HASH_TABLE_SIZE 64
typedef
struct _ERESOURCE
{ LIST_ENTRY SystemResourcesList;
POWNER_ENTRY OwnerTable;
SHORT ActiveCount;
USHORT Flag;
PKSEMAPHORE SharedWaiters;
PKEVENT ExclusiveWaiters;
OWNER_ENTRY OwnerThreads[2];
ULONG ContentionCount;
USHORT NumberOfSharedWaiters;
USHORT NumberOfExclusiveWaiters;
_ANONYMOUS_UNION union
{ PVOID Address;
ULONG_PTR CreatorBackTraceIndex;
} DUMMYUNIONNAME;
KSPIN_LOCK SpinLock;
} ERESOURCE, *PERESOURCE;
/* NOTE: PVOID for methods to avoid 'assignment from incompatible pointer type' warning */
typedef
struct _DRIVER_EXTENSION
{ struct _DRIVER_OBJECT *DriverObject;
PVOID AddDevice;
ULONG Count;
UNICODE_STRING ServiceKeyName;
} DRIVER_EXTENSION, *PDRIVER_EXTENSION;
typedef BOOLEAN DDKAPI
(*PFAST_IO_CHECK_IF_POSSIBLE)(
/*IN*/ struct _FILE_OBJECT *FileObject,
/*IN*/ PLARGE_INTEGER FileOffset,
/*IN*/ ULONG Length,
/*IN*/ BOOLEAN Wait,
/*IN*/ ULONG LockKey,
/*IN*/ BOOLEAN CheckForReadOperation,
/*OUT*/ PIO_STATUS_BLOCK IoStatus,
/*IN*/ struct _DEVICE_OBJECT *DeviceObject);
typedef BOOLEAN DDKAPI
(*PFAST_IO_READ)(
/*IN*/ struct _FILE_OBJECT *FileObject,
/*IN*/ PLARGE_INTEGER FileOffset,
/*IN*/ ULONG Length,
/*IN*/ BOOLEAN Wait,
/*IN*/ ULONG LockKey,
/*OUT*/ PVOID Buffer,
/*OUT*/ PIO_STATUS_BLOCK IoStatus,
/*IN*/ struct _DEVICE_OBJECT *DeviceObject);
typedef BOOLEAN DDKAPI
(*PFAST_IO_WRITE)(
/*IN*/ struct _FILE_OBJECT *FileObject,
/*IN*/ PLARGE_INTEGER FileOffset,
/*IN*/ ULONG Length,
/*IN*/ BOOLEAN Wait,
/*IN*/ ULONG LockKey,
/*IN*/ PVOID Buffer,
/*OUT*/ PIO_STATUS_BLOCK IoStatus,
/*IN*/ struct _DEVICE_OBJECT *DeviceObject);
typedef BOOLEAN DDKAPI
(*PFAST_IO_QUERY_BASIC_INFO)(
/*IN*/ struct _FILE_OBJECT *FileObject,
/*IN*/ BOOLEAN Wait,
/*OUT*/ PFILE_BASIC_INFORMATION Buffer,
/*OUT*/ PIO_STATUS_BLOCK IoStatus,
/*IN*/ struct _DEVICE_OBJECT *DeviceObject);
typedef BOOLEAN DDKAPI
(*PFAST_IO_QUERY_STANDARD_INFO)(
/*IN*/ struct _FILE_OBJECT *FileObject,
/*IN*/ BOOLEAN Wait,
/*OUT*/ PFILE_STANDARD_INFORMATION Buffer,
/*OUT*/ PIO_STATUS_BLOCK IoStatus,
/*IN*/ struct _DEVICE_OBJECT *DeviceObject);
typedef BOOLEAN DDKAPI
(*PFAST_IO_LOCK)(
/*IN*/ struct _FILE_OBJECT *FileObject,
/*IN*/ PLARGE_INTEGER FileOffset,
/*IN*/ PLARGE_INTEGER Length,
PEPROCESS ProcessId,
ULONG Key,
BOOLEAN FailImmediately,
BOOLEAN ExclusiveLock,
/*OUT*/ PIO_STATUS_BLOCK IoStatus,
/*IN*/ struct _DEVICE_OBJECT *DeviceObject);
typedef BOOLEAN DDKAPI
(*PFAST_IO_UNLOCK_SINGLE)(
/*IN*/ struct _FILE_OBJECT *FileObject,
/*IN*/ PLARGE_INTEGER FileOffset,
/*IN*/ PLARGE_INTEGER Length,
PEPROCESS ProcessId,
ULONG Key,
/*OUT*/ PIO_STATUS_BLOCK IoStatus,
/*IN*/ struct _DEVICE_OBJECT *DeviceObject);
typedef BOOLEAN DDKAPI
(*PFAST_IO_UNLOCK_ALL)(
/*IN*/ struct _FILE_OBJECT *FileObject,
PEPROCESS ProcessId,
/*OUT*/ PIO_STATUS_BLOCK IoStatus,
/*IN*/ struct _DEVICE_OBJECT *DeviceObject);
typedef BOOLEAN DDKAPI
(*PFAST_IO_UNLOCK_ALL_BY_KEY)(
/*IN*/ struct _FILE_OBJECT *FileObject,
PVOID ProcessId,
ULONG Key,
/*OUT*/ PIO_STATUS_BLOCK IoStatus,
/*IN*/ struct _DEVICE_OBJECT *DeviceObject);
typedef BOOLEAN DDKAPI
(*PFAST_IO_DEVICE_CONTROL)(
/*IN*/ struct _FILE_OBJECT *FileObject,
/*IN*/ BOOLEAN Wait,
/*IN*/ PVOID InputBuffer /*OPTIONAL*/,
/*IN*/ ULONG InputBufferLength,
/*OUT*/ PVOID OutputBuffer /*OPTIONAL*/,
/*IN*/ ULONG OutputBufferLength,
/*IN*/ ULONG IoControlCode,
/*OUT*/ PIO_STATUS_BLOCK IoStatus,
/*IN*/ struct _DEVICE_OBJECT *DeviceObject);
typedef VOID DDKAPI
(*PFAST_IO_ACQUIRE_FILE)(
/*IN*/ struct _FILE_OBJECT *FileObject);
typedef VOID DDKAPI
(*PFAST_IO_RELEASE_FILE)(
/*IN*/ struct _FILE_OBJECT *FileObject);
typedef VOID DDKAPI
(*PFAST_IO_DETACH_DEVICE)(
/*IN*/ struct _DEVICE_OBJECT *SourceDevice,
/*IN*/ struct _DEVICE_OBJECT *TargetDevice);
typedef BOOLEAN DDKAPI
(*PFAST_IO_QUERY_NETWORK_OPEN_INFO)(
/*IN*/ struct _FILE_OBJECT *FileObject,
/*IN*/ BOOLEAN Wait,
/*OUT*/ struct _FILE_NETWORK_OPEN_INFORMATION *Buffer,
/*OUT*/ struct _IO_STATUS_BLOCK *IoStatus,
/*IN*/ struct _DEVICE_OBJECT *DeviceObject);
typedef NTSTATUS DDKAPI
(*PFAST_IO_ACQUIRE_FOR_MOD_WRITE)(
/*IN*/ struct _FILE_OBJECT *FileObject,
/*IN*/ PLARGE_INTEGER EndingOffset,
/*OUT*/ struct _ERESOURCE **ResourceToRelease,
/*IN*/ struct _DEVICE_OBJECT *DeviceObject);
typedef BOOLEAN DDKAPI
(*PFAST_IO_MDL_READ)(
/*IN*/ struct _FILE_OBJECT *FileObject,
/*IN*/ PLARGE_INTEGER FileOffset,
/*IN*/ ULONG Length,
/*IN*/ ULONG LockKey,
/*OUT*/ PMDL *MdlChain,
/*OUT*/ PIO_STATUS_BLOCK IoStatus,
/*IN*/ struct _DEVICE_OBJECT *DeviceObject);
typedef BOOLEAN DDKAPI
(*PFAST_IO_MDL_READ_COMPLETE)(
/*IN*/ struct _FILE_OBJECT *FileObject,
/*IN*/ PMDL MdlChain,
/*IN*/ struct _DEVICE_OBJECT *DeviceObject);
typedef BOOLEAN DDKAPI
(*PFAST_IO_PREPARE_MDL_WRITE)(
/*IN*/ struct _FILE_OBJECT *FileObject,
/*IN*/ PLARGE_INTEGER FileOffset,
/*IN*/ ULONG Length,
/*IN*/ ULONG LockKey,
/*OUT*/ PMDL *MdlChain,
/*OUT*/ PIO_STATUS_BLOCK IoStatus,
/*IN*/ struct _DEVICE_OBJECT *DeviceObject);
typedef BOOLEAN DDKAPI
(*PFAST_IO_MDL_WRITE_COMPLETE)(
/*IN*/ struct _FILE_OBJECT *FileObject,
/*IN*/ PLARGE_INTEGER FileOffset,
/*IN*/ PMDL MdlChain,
/*IN*/ struct _DEVICE_OBJECT *DeviceObject);
typedef BOOLEAN DDKAPI
(*PFAST_IO_READ_COMPRESSED)(
/*IN*/ struct _FILE_OBJECT *FileObject,
/*IN*/ PLARGE_INTEGER FileOffset,
/*IN*/ ULONG Length,
/*IN*/ ULONG LockKey,
/*OUT*/ PVOID Buffer,
/*OUT*/ PMDL *MdlChain,
/*OUT*/ PIO_STATUS_BLOCK IoStatus,
/*OUT*/ struct _COMPRESSED_DATA_INFO *CompressedDataInfo,
/*IN*/ ULONG CompressedDataInfoLength,
/*IN*/ struct _DEVICE_OBJECT *DeviceObject);
typedef BOOLEAN DDKAPI
(*PFAST_IO_WRITE_COMPRESSED)(
/*IN*/ struct _FILE_OBJECT *FileObject,
/*IN*/ PLARGE_INTEGER FileOffset,
/*IN*/ ULONG Length,
/*IN*/ ULONG LockKey,
/*IN*/ PVOID Buffer,
/*OUT*/ PMDL *MdlChain,
/*OUT*/ PIO_STATUS_BLOCK IoStatus,
/*IN*/ struct _COMPRESSED_DATA_INFO *CompressedDataInfo,
/*IN*/ ULONG CompressedDataInfoLength,
/*IN*/ struct _DEVICE_OBJECT *DeviceObject);
typedef BOOLEAN DDKAPI
(*PFAST_IO_MDL_READ_COMPLETE_COMPRESSED)(
/*IN*/ struct _FILE_OBJECT *FileObject,
/*IN*/ PMDL MdlChain,
/*IN*/ struct _DEVICE_OBJECT *DeviceObject);
typedef BOOLEAN DDKAPI
(*PFAST_IO_MDL_WRITE_COMPLETE_COMPRESSED)(
/*IN*/ struct _FILE_OBJECT *FileObject,
/*IN*/ PLARGE_INTEGER FileOffset,
/*IN*/ PMDL MdlChain,
/*IN*/ struct _DEVICE_OBJECT *DeviceObject);
typedef BOOLEAN DDKAPI
(*PFAST_IO_QUERY_OPEN)(
/*IN*/ struct _IRP *Irp,
/*OUT*/ PFILE_NETWORK_OPEN_INFORMATION NetworkInformation,
/*IN*/ struct _DEVICE_OBJECT *DeviceObject);
typedef NTSTATUS DDKAPI
(*PFAST_IO_RELEASE_FOR_MOD_WRITE)(
/*IN*/ struct _FILE_OBJECT *FileObject,
/*IN*/ struct _ERESOURCE *ResourceToRelease,
/*IN*/ struct _DEVICE_OBJECT *DeviceObject);
typedef NTSTATUS DDKAPI
(*PFAST_IO_ACQUIRE_FOR_CCFLUSH)(
/*IN*/ struct _FILE_OBJECT *FileObject,
/*IN*/ struct _DEVICE_OBJECT *DeviceObject);
typedef NTSTATUS DDKAPI
(*PFAST_IO_RELEASE_FOR_CCFLUSH) (
/*IN*/ struct _FILE_OBJECT *FileObject,
/*IN*/ struct _DEVICE_OBJECT *DeviceObject);
typedef
struct _FAST_IO_DISPATCH
{ ULONG SizeOfFastIoDispatch;
PFAST_IO_CHECK_IF_POSSIBLE FastIoCheckIfPossible;
PFAST_IO_READ FastIoRead;
PFAST_IO_WRITE FastIoWrite;
PFAST_IO_QUERY_BASIC_INFO FastIoQueryBasicInfo;
PFAST_IO_QUERY_STANDARD_INFO FastIoQueryStandardInfo;
PFAST_IO_LOCK FastIoLock;
PFAST_IO_UNLOCK_SINGLE FastIoUnlockSingle;
PFAST_IO_UNLOCK_ALL FastIoUnlockAll;
PFAST_IO_UNLOCK_ALL_BY_KEY FastIoUnlockAllByKey;
PFAST_IO_DEVICE_CONTROL FastIoDeviceControl;
PFAST_IO_ACQUIRE_FILE AcquireFileForNtCreateSection;
PFAST_IO_RELEASE_FILE ReleaseFileForNtCreateSection;
PFAST_IO_DETACH_DEVICE FastIoDetachDevice;
PFAST_IO_QUERY_NETWORK_OPEN_INFO FastIoQueryNetworkOpenInfo;
PFAST_IO_ACQUIRE_FOR_MOD_WRITE AcquireForModWrite;
PFAST_IO_MDL_READ MdlRead;
PFAST_IO_MDL_READ_COMPLETE MdlReadComplete;
PFAST_IO_PREPARE_MDL_WRITE PrepareMdlWrite;
PFAST_IO_MDL_WRITE_COMPLETE MdlWriteComplete;
PFAST_IO_READ_COMPRESSED FastIoReadCompressed;
PFAST_IO_WRITE_COMPRESSED FastIoWriteCompressed;
PFAST_IO_MDL_READ_COMPLETE_COMPRESSED MdlReadCompleteCompressed;
PFAST_IO_MDL_WRITE_COMPLETE_COMPRESSED MdlWriteCompleteCompressed;
PFAST_IO_QUERY_OPEN FastIoQueryOpen;
PFAST_IO_RELEASE_FOR_MOD_WRITE ReleaseForModWrite;
PFAST_IO_ACQUIRE_FOR_CCFLUSH AcquireForCcFlush;
PFAST_IO_RELEASE_FOR_CCFLUSH ReleaseForCcFlush;
} FAST_IO_DISPATCH, *PFAST_IO_DISPATCH;
typedef
struct _DRIVER_OBJECT
{ CSHORT Type;
CSHORT Size;
PDEVICE_OBJECT DeviceObject;
ULONG Flags;
PVOID DriverStart;
ULONG DriverSize;
PVOID DriverSection;
PDRIVER_EXTENSION DriverExtension;
UNICODE_STRING DriverName;
PUNICODE_STRING HardwareDatabase;
PFAST_IO_DISPATCH FastIoDispatch;
PDRIVER_INITIALIZE DriverInit;
PDRIVER_STARTIO DriverStartIo;
PDRIVER_UNLOAD DriverUnload;
PDRIVER_DISPATCH MajorFunction[IRP_MJ_MAXIMUM_FUNCTION + 1];
} DRIVER_OBJECT, *PDRIVER_OBJECT;
typedef
struct _SECTION_OBJECT_POINTERS
{ PVOID DataSectionObject;
PVOID SharedCacheMap;
PVOID ImageSectionObject;
} SECTION_OBJECT_POINTERS, *PSECTION_OBJECT_POINTERS;
typedef
struct _IO_COMPLETION_CONTEXT
{ PVOID Port;
PVOID Key;
} IO_COMPLETION_CONTEXT, *PIO_COMPLETION_CONTEXT;
/* FILE_OBJECT.Flags
*/
#define FO_FILE_OPEN 0x00000001
#define FO_SYNCHRONOUS_IO 0x00000002
#define FO_ALERTABLE_IO 0x00000004
#define FO_NO_INTERMEDIATE_BUFFERING 0x00000008
#define FO_WRITE_THROUGH 0x00000010
#define FO_SEQUENTIAL_ONLY 0x00000020
#define FO_CACHE_SUPPORTED 0x00000040
#define FO_NAMED_PIPE 0x00000080
#define FO_STREAM_FILE 0x00000100
#define FO_MAILSLOT 0x00000200
#define FO_GENERATE_AUDIT_ON_CLOSE 0x00000400
#define FO_DIRECT_DEVICE_OPEN 0x00000800
#define FO_FILE_MODIFIED 0x00001000
#define FO_FILE_SIZE_CHANGED 0x00002000
#define FO_CLEANUP_COMPLETE 0x00004000
#define FO_TEMPORARY_FILE 0x00008000
#define FO_DELETE_ON_CLOSE 0x00010000
#define FO_OPENED_CASE_SENSITIVE 0x00020000
#define FO_HANDLE_CREATED 0x00040000
#define FO_FILE_FAST_IO_READ 0x00080000
#define FO_RANDOM_ACCESS 0x00100000
#define FO_FILE_OPEN_CANCELLED 0x00200000
#define FO_VOLUME_OPEN 0x00400000
#define FO_FILE_OBJECT_HAS_EXTENSION 0x00800000
#define FO_REMOTE_ORIGIN 0x01000000
typedef
struct _FILE_OBJECT
{ CSHORT Type;
CSHORT Size;
PDEVICE_OBJECT DeviceObject;
PVPB Vpb;
PVOID FsContext;
PVOID FsContext2;
PSECTION_OBJECT_POINTERS SectionObjectPointer;
PVOID PrivateCacheMap;
NTSTATUS FinalStatus;
struct _FILE_OBJECT *RelatedFileObject;
BOOLEAN LockOperation;
BOOLEAN DeletePending;
BOOLEAN ReadAccess;
BOOLEAN WriteAccess;
BOOLEAN DeleteAccess;
BOOLEAN SharedRead;
BOOLEAN SharedWrite;
BOOLEAN SharedDelete;
ULONG Flags;
UNICODE_STRING FileName;
LARGE_INTEGER CurrentByteOffset;
ULONG Waiters;
ULONG Busy;
PVOID LastLock;
KEVENT Lock;
KEVENT Event;
PIO_COMPLETION_CONTEXT CompletionContext;
} FILE_OBJECT, *PFILE_OBJECT;
typedef
enum _SECURITY_OPERATION_CODE
{ SetSecurityDescriptor,
QuerySecurityDescriptor,
DeleteSecurityDescriptor,
AssignSecurityDescriptor
} SECURITY_OPERATION_CODE, *PSECURITY_OPERATION_CODE;
#define INITIAL_PRIVILEGE_COUNT 3
typedef
struct _INITIAL_PRIVILEGE_SET
{ ULONG PrivilegeCount;
ULONG Control;
LUID_AND_ATTRIBUTES Privilege[INITIAL_PRIVILEGE_COUNT];
} INITIAL_PRIVILEGE_SET, *PINITIAL_PRIVILEGE_SET;
typedef
struct _SECURITY_SUBJECT_CONTEXT
{ PACCESS_TOKEN ClientToken;
SECURITY_IMPERSONATION_LEVEL ImpersonationLevel;
PACCESS_TOKEN PrimaryToken;
PVOID ProcessAuditId;
} SECURITY_SUBJECT_CONTEXT, *PSECURITY_SUBJECT_CONTEXT;
#include <pshpack4.h>
typedef
struct _ACCESS_STATE
{ LUID OperationID;
BOOLEAN SecurityEvaluated;
BOOLEAN GenerateAudit;
BOOLEAN GenerateOnClose;
BOOLEAN PrivilegesAllocated;
ULONG Flags;
ACCESS_MASK RemainingDesiredAccess;
ACCESS_MASK PreviouslyGrantedAccess;
ACCESS_MASK OriginalDesiredAccess;
SECURITY_SUBJECT_CONTEXT SubjectSecurityContext;
PSECURITY_DESCRIPTOR SecurityDescriptor;
PVOID AuxData;
union
{ INITIAL_PRIVILEGE_SET InitialPrivilegeSet;
PRIVILEGE_SET PrivilegeSet;
} Privileges;
BOOLEAN AuditPrivileges;
UNICODE_STRING ObjectName;
UNICODE_STRING ObjectTypeName;
} ACCESS_STATE, *PACCESS_STATE;
#include <poppack.h>
typedef
struct _IO_SECURITY_CONTEXT
{ PSECURITY_QUALITY_OF_SERVICE SecurityQos;
PACCESS_STATE AccessState;
ACCESS_MASK DesiredAccess;
ULONG FullCreateOptions;
} IO_SECURITY_CONTEXT, *PIO_SECURITY_CONTEXT;
struct _IO_CSQ;
typedef
struct _IO_CSQ_IRP_CONTEXT
{ ULONG Type;
struct _IRP *Irp;
struct _IO_CSQ *Csq;
} IO_CSQ_IRP_CONTEXT, *PIO_CSQ_IRP_CONTEXT;
typedef VOID DDKAPI
(*PIO_CSQ_INSERT_IRP)(
/*IN*/ struct _IO_CSQ *Csq,
/*IN*/ PIRP Irp);
typedef VOID DDKAPI
(*PIO_CSQ_REMOVE_IRP)(
/*IN*/ struct _IO_CSQ *Csq,
/*IN*/ PIRP Irp);
typedef PIRP DDKAPI
(*PIO_CSQ_PEEK_NEXT_IRP)(
/*IN*/ struct _IO_CSQ *Csq,
/*IN*/ PIRP Irp,
/*IN*/ PVOID PeekContext);
typedef VOID DDKAPI
(*PIO_CSQ_ACQUIRE_LOCK)(
/*IN*/ struct _IO_CSQ *Csq,
/*OUT*/ PKIRQL Irql);
typedef VOID DDKAPI
(*PIO_CSQ_RELEASE_LOCK)(
/*IN*/ struct _IO_CSQ *Csq,
/*IN*/ KIRQL Irql);
typedef VOID DDKAPI
(*PIO_CSQ_COMPLETE_CANCELED_IRP)(
/*IN*/ struct _IO_CSQ *Csq,
/*IN*/ PIRP Irp);
typedef
struct _IO_CSQ
{ ULONG Type;
PIO_CSQ_INSERT_IRP CsqInsertIrp;
PIO_CSQ_REMOVE_IRP CsqRemoveIrp;
PIO_CSQ_PEEK_NEXT_IRP CsqPeekNextIrp;
PIO_CSQ_ACQUIRE_LOCK CsqAcquireLock;
PIO_CSQ_RELEASE_LOCK CsqReleaseLock;
PIO_CSQ_COMPLETE_CANCELED_IRP CsqCompleteCanceledIrp;
PVOID ReservePointer;
} IO_CSQ, *PIO_CSQ;
#include <pshpack4.h>
typedef
struct _IO_STACK_LOCATION
{ UCHAR MajorFunction;
UCHAR MinorFunction;
UCHAR Flags;
UCHAR Control;
union
{ struct
{ PIO_SECURITY_CONTEXT SecurityContext;
ULONG Options;
USHORT POINTER_ALIGNMENT FileAttributes;
USHORT ShareAccess;
ULONG POINTER_ALIGNMENT EaLength;
} Create;
struct
{ ULONG Length;
ULONG POINTER_ALIGNMENT Key;
LARGE_INTEGER ByteOffset;
} Read;
struct
{ ULONG Length;
ULONG POINTER_ALIGNMENT Key;
LARGE_INTEGER ByteOffset;
} Write;
struct
{ ULONG Length;
FILE_INFORMATION_CLASS POINTER_ALIGNMENT FileInformationClass;
} QueryFile;
struct
{ ULONG Length;
FILE_INFORMATION_CLASS POINTER_ALIGNMENT FileInformationClass;
PFILE_OBJECT FileObject;
_ANONYMOUS_UNION union
{ _ANONYMOUS_STRUCT struct
{ BOOLEAN ReplaceIfExists;
BOOLEAN AdvanceOnly;
} DUMMYSTRUCTNAME;
ULONG ClusterCount;
HANDLE DeleteHandle;
} DUMMYUNIONNAME;
} SetFile;
struct
{ ULONG Length;
FS_INFORMATION_CLASS POINTER_ALIGNMENT FsInformationClass;
} QueryVolume;
struct
{ ULONG OutputBufferLength;
ULONG POINTER_ALIGNMENT InputBufferLength;
ULONG POINTER_ALIGNMENT IoControlCode;
PVOID Type3InputBuffer;
} DeviceIoControl;
struct
{ SECURITY_INFORMATION SecurityInformation;
ULONG POINTER_ALIGNMENT Length;
} QuerySecurity;
struct
{ SECURITY_INFORMATION SecurityInformation;
PSECURITY_DESCRIPTOR SecurityDescriptor;
} SetSecurity;
struct
{ PVPB Vpb;
PDEVICE_OBJECT DeviceObject;
} MountVolume;
struct
{ PVPB Vpb;
PDEVICE_OBJECT DeviceObject;
} VerifyVolume;
struct
{ struct _SCSI_REQUEST_BLOCK *Srb;
} Scsi;
struct
{ DEVICE_RELATION_TYPE Type;
} QueryDeviceRelations;
struct
{ CONST GUID *InterfaceType;
USHORT Size;
USHORT Version;
PINTERFACE Interface;
PVOID InterfaceSpecificData;
} QueryInterface;
struct
{ PDEVICE_CAPABILITIES Capabilities;
} DeviceCapabilities;
struct
{ PIO_RESOURCE_REQUIREMENTS_LIST IoResourceRequirementList;
} FilterResourceRequirements;
struct
{ ULONG WhichSpace;
PVOID Buffer;
ULONG Offset;
ULONG POINTER_ALIGNMENT Length;
} ReadWriteConfig;
struct
{ BOOLEAN Lock;
} SetLock;
struct
{ BUS_QUERY_ID_TYPE IdType;
} QueryId;
struct
{ DEVICE_TEXT_TYPE DeviceTextType;
LCID POINTER_ALIGNMENT LocaleId;
} QueryDeviceText;
struct
{ BOOLEAN InPath;
BOOLEAN Reserved[3];
DEVICE_USAGE_NOTIFICATION_TYPE POINTER_ALIGNMENT Type;
} UsageNotification;
struct
{ SYSTEM_POWER_STATE PowerState;
} WaitWake;
struct
{ PPOWER_SEQUENCE PowerSequence;
} PowerSequence;
struct
{ ULONG SystemContext;
POWER_STATE_TYPE POINTER_ALIGNMENT Type;
POWER_STATE POINTER_ALIGNMENT State;
POWER_ACTION POINTER_ALIGNMENT ShutdownType;
} Power;
struct
{ PCM_RESOURCE_LIST AllocatedResources;
PCM_RESOURCE_LIST AllocatedResourcesTranslated;
} StartDevice;
struct
{ ULONG_PTR ProviderId;
PVOID DataPath;
ULONG BufferSize;
PVOID Buffer;
} WMI;
struct
{ PVOID Argument1;
PVOID Argument2;
PVOID Argument3;
PVOID Argument4;
} Others;
} Parameters;
PDEVICE_OBJECT DeviceObject;
PFILE_OBJECT FileObject;
PIO_COMPLETION_ROUTINE CompletionRoutine;
PVOID Context;
} IO_STACK_LOCATION, *PIO_STACK_LOCATION;
#include <poppack.h>
/* IO_STACK_LOCATION.Control
*/
#define SL_PENDING_RETURNED 0x01
#define SL_INVOKE_ON_CANCEL 0x20
#define SL_INVOKE_ON_SUCCESS 0x40
#define SL_INVOKE_ON_ERROR 0x80
typedef
enum _KEY_INFORMATION_CLASS
{ KeyBasicInformation,
KeyNodeInformation,
KeyFullInformation,
KeyNameInformation,
KeyCachedInformation,
KeyFlagsInformation
} KEY_INFORMATION_CLASS;
typedef
struct _KEY_BASIC_INFORMATION
{ LARGE_INTEGER LastWriteTime;
ULONG TitleIndex;
ULONG NameLength;
WCHAR Name[1];
} KEY_BASIC_INFORMATION, *PKEY_BASIC_INFORMATION;
typedef
struct _KEY_FULL_INFORMATION
{ LARGE_INTEGER LastWriteTime;
ULONG TitleIndex;
ULONG ClassOffset;
ULONG ClassLength;
ULONG SubKeys;
ULONG MaxNameLen;
ULONG MaxClassLen;
ULONG Values;
ULONG MaxValueNameLen;
ULONG MaxValueDataLen;
WCHAR Class[1];
} KEY_FULL_INFORMATION, *PKEY_FULL_INFORMATION;
typedef
struct _KEY_NODE_INFORMATION
{ LARGE_INTEGER LastWriteTime;
ULONG TitleIndex;
ULONG ClassOffset;
ULONG ClassLength;
ULONG NameLength;
WCHAR Name[1];
} KEY_NODE_INFORMATION, *PKEY_NODE_INFORMATION;
typedef
struct _KEY_VALUE_BASIC_INFORMATION
{ ULONG TitleIndex;
ULONG Type;
ULONG NameLength;
WCHAR Name[1];
} KEY_VALUE_BASIC_INFORMATION, *PKEY_VALUE_BASIC_INFORMATION;
typedef
struct _KEY_VALUE_FULL_INFORMATION
{ ULONG TitleIndex;
ULONG Type;
ULONG DataOffset;
ULONG DataLength;
ULONG NameLength;
WCHAR Name[1];
} KEY_VALUE_FULL_INFORMATION, *PKEY_VALUE_FULL_INFORMATION;
typedef
struct _KEY_VALUE_PARTIAL_INFORMATION
{ ULONG TitleIndex;
ULONG Type;
ULONG DataLength;
UCHAR Data[1];
} KEY_VALUE_PARTIAL_INFORMATION, *PKEY_VALUE_PARTIAL_INFORMATION;
typedef
struct _KEY_VALUE_PARTIAL_INFORMATION_ALIGN64
{ ULONG Type;
ULONG DataLength;
UCHAR Data[1];
} KEY_VALUE_PARTIAL_INFORMATION_ALIGN64, *PKEY_VALUE_PARTIAL_INFORMATION_ALIGN64;
typedef
struct _KEY_VALUE_ENTRY
{ PUNICODE_STRING ValueName;
ULONG DataLength;
ULONG DataOffset;
ULONG Type;
} KEY_VALUE_ENTRY, *PKEY_VALUE_ENTRY;
typedef
enum _KEY_VALUE_INFORMATION_CLASS
{ KeyValueBasicInformation,
KeyValueFullInformation,
KeyValuePartialInformation,
KeyValueFullInformationAlign64,
KeyValuePartialInformationAlign64
} KEY_VALUE_INFORMATION_CLASS;
/* KEY_VALUE_Xxx.Type
*/
#define REG_NONE 0
#define REG_SZ 1
#define REG_EXPAND_SZ 2
#define REG_BINARY 3
#define REG_DWORD 4
#define REG_DWORD_LITTLE_ENDIAN 4
#define REG_DWORD_BIG_ENDIAN 5
#define REG_LINK 6
#define REG_MULTI_SZ 7
#define REG_RESOURCE_LIST 8
#define REG_FULL_RESOURCE_DESCRIPTOR 9
#define REG_RESOURCE_REQUIREMENTS_LIST 10
#define REG_QWORD 11
#define REG_QWORD_LITTLE_ENDIAN 11
#define PCI_TYPE0_ADDRESSES 6
#define PCI_TYPE1_ADDRESSES 2
#define PCI_TYPE2_ADDRESSES 5
typedef
struct _PCI_COMMON_CONFIG
{ USHORT VendorID;
USHORT DeviceID;
USHORT Command;
USHORT Status;
UCHAR RevisionID;
UCHAR ProgIf;
UCHAR SubClass;
UCHAR BaseClass;
UCHAR CacheLineSize;
UCHAR LatencyTimer;
UCHAR HeaderType;
UCHAR BIST;
union
{ struct _PCI_HEADER_TYPE_0
{ ULONG BaseAddresses[PCI_TYPE0_ADDRESSES];
ULONG CIS;
USHORT SubVendorID;
USHORT SubSystemID;
ULONG ROMBaseAddress;
UCHAR CapabilitiesPtr;
UCHAR Reserved1[3];
ULONG Reserved2;
UCHAR InterruptLine;
UCHAR InterruptPin;
UCHAR MinimumGrant;
UCHAR MaximumLatency;
} type0;
struct _PCI_HEADER_TYPE_1
{ ULONG BaseAddresses[PCI_TYPE1_ADDRESSES];
UCHAR PrimaryBus;
UCHAR SecondaryBus;
UCHAR SubordinateBus;
UCHAR SecondaryLatency;
UCHAR IOBase;
UCHAR IOLimit;
USHORT SecondaryStatus;
USHORT MemoryBase;
USHORT MemoryLimit;
USHORT PrefetchBase;
USHORT PrefetchLimit;
ULONG PrefetchBaseUpper32;
ULONG PrefetchLimitUpper32;
USHORT IOBaseUpper16;
USHORT IOLimitUpper16;
UCHAR CapabilitiesPtr;
UCHAR Reserved1[3];
ULONG ROMBaseAddress;
UCHAR InterruptLine;
UCHAR InterruptPin;
USHORT BridgeControl;
} type1;
struct _PCI_HEADER_TYPE_2
{ ULONG SocketRegistersBaseAddress;
UCHAR CapabilitiesPtr;
UCHAR Reserved;
USHORT SecondaryStatus;
UCHAR PrimaryBus;
UCHAR SecondaryBus;
UCHAR SubordinateBus;
UCHAR SecondaryLatency;
struct
{ ULONG Base;
ULONG Limit;
} Range[PCI_TYPE2_ADDRESSES - 1];
UCHAR InterruptLine;
UCHAR InterruptPin;
USHORT BridgeControl;
} type2;
} u;
UCHAR DeviceSpecific[192];
} PCI_COMMON_CONFIG, *PPCI_COMMON_CONFIG;
/* PCI_COMMON_CONFIG.Command
*/
#define PCI_ENABLE_IO_SPACE 0x0001
#define PCI_ENABLE_MEMORY_SPACE 0x0002
#define PCI_ENABLE_BUS_MASTER 0x0004
#define PCI_ENABLE_SPECIAL_CYCLES 0x0008
#define PCI_ENABLE_WRITE_AND_INVALIDATE 0x0010
#define PCI_ENABLE_VGA_COMPATIBLE_PALETTE 0x0020
#define PCI_ENABLE_PARITY 0x0040
#define PCI_ENABLE_WAIT_CYCLE 0x0080
#define PCI_ENABLE_SERR 0x0100
#define PCI_ENABLE_FAST_BACK_TO_BACK 0x0200
/* PCI_COMMON_CONFIG.Status
*/
#define PCI_STATUS_CAPABILITIES_LIST 0x0010
#define PCI_STATUS_66MHZ_CAPABLE 0x0020
#define PCI_STATUS_UDF_SUPPORTED 0x0040
#define PCI_STATUS_FAST_BACK_TO_BACK 0x0080
#define PCI_STATUS_DATA_PARITY_DETECTED 0x0100
#define PCI_STATUS_DEVSEL 0x0600
#define PCI_STATUS_SIGNALED_TARGET_ABORT 0x0800
#define PCI_STATUS_RECEIVED_TARGET_ABORT 0x1000
#define PCI_STATUS_RECEIVED_MASTER_ABORT 0x2000
#define PCI_STATUS_SIGNALED_SYSTEM_ERROR 0x4000
#define PCI_STATUS_DETECTED_PARITY_ERROR 0x8000
/* PCI_COMMON_CONFIG.HeaderType
*/
#define PCI_MULTIFUNCTION 0x80
#define PCI_DEVICE_TYPE 0x00
#define PCI_BRIDGE_TYPE 0x01
#define PCI_CARDBUS_BRIDGE_TYPE 0x02
#define PCI_CONFIGURATION_TYPE(PciData) \
(((PPCI_COMMON_CONFIG) (PciData))->HeaderType & ~PCI_MULTIFUNCTION)
#define PCI_MULTIFUNCTION_DEVICE(PciData) \
((((PPCI_COMMON_CONFIG) (PciData))->HeaderType & PCI_MULTIFUNCTION) != 0)
typedef
struct _PCI_SLOT_NUMBER
{ union
{ struct
{ ULONG DeviceNumber : 5;
ULONG FunctionNumber : 3;
ULONG Reserved : 24;
} bits;
ULONG AsULONG;
} u;
} PCI_SLOT_NUMBER, *PPCI_SLOT_NUMBER;
typedef
enum _POOL_TYPE
{ NonPagedPool,
PagedPool,
NonPagedPoolMustSucceed,
DontUseThisType,
NonPagedPoolCacheAligned,
PagedPoolCacheAligned,
NonPagedPoolCacheAlignedMustS,
MaxPoolType,
NonPagedPoolSession = 32,
PagedPoolSession,
NonPagedPoolMustSucceedSession,
DontUseThisTypeSession,
NonPagedPoolCacheAlignedSession,
PagedPoolCacheAlignedSession,
NonPagedPoolCacheAlignedMustSSession
} POOL_TYPE;
typedef
enum _EX_POOL_PRIORITY
{ LowPoolPriority = 0,
LowPoolPrioritySpecialPoolOverrun = 8,
LowPoolPrioritySpecialPoolUnderrun = 9,
NormalPoolPriority = 16,
NormalPoolPrioritySpecialPoolOverrun = 24,
NormalPoolPrioritySpecialPoolUnderrun = 25,
HighPoolPriority = 32,
HighPoolPrioritySpecialPoolOverrun = 40,
HighPoolPrioritySpecialPoolUnderrun = 41
} EX_POOL_PRIORITY;
/* PRIVILEGE_SET.Control
*/
#define PRIVILEGE_SET_ALL_NECESSARY 1
typedef
struct _RTL_OSVERSIONINFOW
{ ULONG dwOSVersionInfoSize;
ULONG dwMajorVersion;
ULONG dwMinorVersion;
ULONG dwBuildNumber;
ULONG dwPlatformId;
WCHAR szCSDVersion[128];
} RTL_OSVERSIONINFOW, *PRTL_OSVERSIONINFOW;
typedef
struct _RTL_OSVERSIONINFOEXW
{ ULONG dwOSVersionInfoSize;
ULONG dwMajorVersion;
ULONG dwMinorVersion;
ULONG dwBuildNumber;
ULONG dwPlatformId;
WCHAR szCSDVersion[128];
USHORT wServicePackMajor;
USHORT wServicePackMinor;
USHORT wSuiteMask;
UCHAR wProductType;
UCHAR wReserved;
} RTL_OSVERSIONINFOEXW, *PRTL_OSVERSIONINFOEXW;
NTOSAPI ULONGLONG DDKAPI
VerSetConditionMask(
/*IN*/ ULONGLONG ConditionMask,
/*IN*/ ULONG TypeMask,
/*IN*/ UCHAR Condition
);
#define VER_SET_CONDITION(ConditionMask, TypeBitMask, ComparisonType) \
((ConditionMask) = VerSetConditionMask((ConditionMask), \
(TypeBitMask), (ComparisonType)))
/* RtlVerifyVersionInfo() TypeMask
*/
#define VER_MINORVERSION 0x0000001
#define VER_MAJORVERSION 0x0000002
#define VER_BUILDNUMBER 0x0000004
#define VER_PLATFORMID 0x0000008
#define VER_SERVICEPACKMINOR 0x0000010
#define VER_SERVICEPACKMAJOR 0x0000020
#define VER_SUITENAME 0x0000040
#define VER_PRODUCT_TYPE 0x0000080
/* RtlVerifyVersionInfo() ComparisonType
*/
#define VER_EQUAL 1
#define VER_GREATER 2
#define VER_GREATER_EQUAL 3
#define VER_LESS 4
#define VER_LESS_EQUAL 5
#define VER_AND 6
#define VER_OR 7
#define VER_CONDITION_MASK 7
#define VER_NUM_BITS_PER_CONDITION_MASK 3
typedef
struct _RTL_BITMAP
{ ULONG SizeOfBitMap;
PULONG Buffer;
} RTL_BITMAP, *PRTL_BITMAP;
typedef
struct _RTL_BITMAP_RUN
{ ULONG StartingIndex;
ULONG NumberOfBits;
} RTL_BITMAP_RUN, *PRTL_BITMAP_RUN;
typedef NTSTATUS DDKAPI
(*PRTL_QUERY_REGISTRY_ROUTINE)(
/*IN*/ PWSTR ValueName,
/*IN*/ ULONG ValueType,
/*IN*/ PVOID ValueData,
/*IN*/ ULONG ValueLength,
/*IN*/ PVOID Context,
/*IN*/ PVOID EntryContext);
#define RTL_REGISTRY_ABSOLUTE 0
#define RTL_REGISTRY_SERVICES 1
#define RTL_REGISTRY_CONTROL 2
#define RTL_REGISTRY_WINDOWS_NT 3
#define RTL_REGISTRY_DEVICEMAP 4
#define RTL_REGISTRY_USER 5
/* RTL_QUERY_REGISTRY_TABLE.Flags */
#define RTL_QUERY_REGISTRY_SUBKEY 0x00000001
#define RTL_QUERY_REGISTRY_TOPKEY 0x00000002
#define RTL_QUERY_REGISTRY_REQUIRED 0x00000004
#define RTL_QUERY_REGISTRY_NOVALUE 0x00000008
#define RTL_QUERY_REGISTRY_NOEXPAND 0x00000010
#define RTL_QUERY_REGISTRY_DIRECT 0x00000020
#define RTL_QUERY_REGISTRY_DELETE 0x00000040
typedef
struct _RTL_QUERY_REGISTRY_TABLE
{ PRTL_QUERY_REGISTRY_ROUTINE QueryRoutine;
ULONG Flags;
PWSTR Name;
PVOID EntryContext;
ULONG DefaultType;
PVOID DefaultData;
ULONG DefaultLength;
} RTL_QUERY_REGISTRY_TABLE, *PRTL_QUERY_REGISTRY_TABLE;
typedef
struct _TIME_FIELDS
{ CSHORT Year;
CSHORT Month;
CSHORT Day;
CSHORT Hour;
CSHORT Minute;
CSHORT Second;
CSHORT Milliseconds;
CSHORT Weekday;
} TIME_FIELDS, *PTIME_FIELDS;
typedef PVOID DDKAPI
(*PALLOCATE_FUNCTION)(
/*IN*/ POOL_TYPE PoolType,
/*IN*/ SIZE_T NumberOfBytes,
/*IN*/ ULONG Tag
);
typedef VOID DDKAPI
(*PFREE_FUNCTION)( /*IN*/ PVOID Buffer );
#define GENERAL_LOOKASIDE_S \
SLIST_HEADER ListHead; \
USHORT Depth; \
USHORT MaximumDepth; \
ULONG TotalAllocates; \
_ANONYMOUS_UNION union { \
ULONG AllocateMisses; \
ULONG AllocateHits; \
} DUMMYUNIONNAME; \
ULONG TotalFrees; \
_ANONYMOUS_UNION union { \
ULONG FreeMisses; \
ULONG FreeHits; \
} DUMMYUNIONNAME2; \
POOL_TYPE Type; \
ULONG Tag; \
ULONG Size; \
PALLOCATE_FUNCTION Allocate; \
PFREE_FUNCTION Free; \
LIST_ENTRY ListEntry; \
ULONG LastTotalAllocates; \
_ANONYMOUS_UNION union { \
ULONG LastAllocateMisses; \
ULONG LastAllocateHits; \
} DUMMYUNIONNAME3; \
ULONG Future[2];
typedef
struct _GENERAL_LOOKASIDE
{ GENERAL_LOOKASIDE_S
} GENERAL_LOOKASIDE, *PGENERAL_LOOKASIDE;
typedef
struct _NPAGED_LOOKASIDE_LIST
{ GENERAL_LOOKASIDE_S
KSPIN_LOCK Obsoleted;
} NPAGED_LOOKASIDE_LIST, *PNPAGED_LOOKASIDE_LIST;
typedef
struct _PAGED_LOOKASIDE_LIST
{ GENERAL_LOOKASIDE_S
FAST_MUTEX Obsoleted;
} PAGED_LOOKASIDE_LIST, *PPAGED_LOOKASIDE_LIST;
typedef struct _CALLBACK_OBJECT *PCALLBACK_OBJECT;
typedef VOID DDKAPI
(*PCALLBACK_FUNCTION)(
/*IN*/ PVOID CallbackContext,
/*IN*/ PVOID Argument1,
/*IN*/ PVOID Argument2
);
typedef
enum _EVENT_TYPE
{ NotificationEvent,
SynchronizationEvent
} EVENT_TYPE;
typedef
enum _KWAIT_REASON
{ Executive,
FreePage,
PageIn,
PoolAllocation,
DelayExecution,
Suspended,
UserRequest,
WrExecutive,
WrFreePage,
WrPageIn,
WrPoolAllocation,
WrDelayExecution,
WrSuspended,
WrUserRequest,
WrEventPair,
WrQueue,
WrLpcReceive,
WrLpcReply,
WrVirtualMemory,
WrPageOut,
WrRendezvous,
Spare2,
Spare3,
Spare4,
Spare5,
Spare6,
WrKernel,
MaximumWaitReason
} KWAIT_REASON;
typedef
struct _KWAIT_BLOCK
{ LIST_ENTRY WaitListEntry;
struct _KTHREAD * RESTRICTED_POINTER Thread;
PVOID Object;
struct _KWAIT_BLOCK * RESTRICTED_POINTER NextWaitBlock;
USHORT WaitKey;
USHORT WaitType;
} KWAIT_BLOCK, *PKWAIT_BLOCK, *RESTRICTED_POINTER PRKWAIT_BLOCK;
typedef struct _IO_REMOVE_LOCK_TRACKING_BLOCK * PIO_REMOVE_LOCK_TRACKING_BLOCK;
typedef
struct _IO_REMOVE_LOCK_COMMON_BLOCK
{ BOOLEAN Removed;
BOOLEAN Reserved[3];
LONG IoCount;
KEVENT RemoveEvent;
} IO_REMOVE_LOCK_COMMON_BLOCK;
typedef
struct _IO_REMOVE_LOCK_DBG_BLOCK
{ LONG Signature;
LONG HighWatermark;
LONGLONG MaxLockedTicks;
LONG AllocateTag;
LIST_ENTRY LockList;
KSPIN_LOCK Spin;
LONG LowMemoryCount;
ULONG Reserved1[4];
PVOID Reserved2;
PIO_REMOVE_LOCK_TRACKING_BLOCK Blocks;
} IO_REMOVE_LOCK_DBG_BLOCK;
typedef
struct _IO_REMOVE_LOCK
{ IO_REMOVE_LOCK_COMMON_BLOCK Common;
#ifdef DBG
IO_REMOVE_LOCK_DBG_BLOCK Dbg;
#endif
} IO_REMOVE_LOCK, *PIO_REMOVE_LOCK;
typedef struct _IO_WORKITEM *PIO_WORKITEM;
typedef VOID DDKAPI
(*PIO_WORKITEM_ROUTINE)(
/*IN*/ PDEVICE_OBJECT DeviceObject,
/*IN*/ PVOID Context);
typedef
struct _SHARE_ACCESS
{ ULONG OpenCount;
ULONG Readers;
ULONG Writers;
ULONG Deleters;
ULONG SharedRead;
ULONG SharedWrite;
ULONG SharedDelete;
} SHARE_ACCESS, *PSHARE_ACCESS;
typedef
enum _KINTERRUPT_MODE
{ LevelSensitive,
Latched
} KINTERRUPT_MODE;
typedef VOID DDKAPI
(*PKINTERRUPT_ROUTINE)( VOID );
typedef
enum _KPROFILE_SOURCE
{ ProfileTime,
ProfileAlignmentFixup,
ProfileTotalIssues,
ProfilePipelineDry,
ProfileLoadInstructions,
ProfilePipelineFrozen,
ProfileBranchInstructions,
ProfileTotalNonissues,
ProfileDcacheMisses,
ProfileIcacheMisses,
ProfileCacheMisses,
ProfileBranchMispredictions,
ProfileStoreInstructions,
ProfileFpInstructions,
ProfileIntegerInstructions,
Profile2Issue,
Profile3Issue,
Profile4Issue,
ProfileSpecialInstructions,
ProfileTotalCycles,
ProfileIcacheIssues,
ProfileDcacheAccesses,
ProfileMemoryBarrierCycles,
ProfileLoadLinkedIssues,
ProfileMaximum
} KPROFILE_SOURCE;
typedef
enum _CREATE_FILE_TYPE
{ CreateFileTypeNone,
CreateFileTypeNamedPipe,
CreateFileTypeMailslot
} CREATE_FILE_TYPE;
typedef
struct _CONFIGURATION_INFORMATION
{ ULONG DiskCount;
ULONG FloppyCount;
ULONG CdRomCount;
ULONG TapeCount;
ULONG ScsiPortCount;
ULONG SerialCount;
ULONG ParallelCount;
BOOLEAN AtDiskPrimaryAddressClaimed;
BOOLEAN AtDiskSecondaryAddressClaimed;
ULONG Version;
ULONG MediumChangerCount;
} CONFIGURATION_INFORMATION, *PCONFIGURATION_INFORMATION;
typedef
enum _CONFIGURATION_TYPE
{ ArcSystem,
CentralProcessor,
FloatingPointProcessor,
PrimaryIcache,
PrimaryDcache,
SecondaryIcache,
SecondaryDcache,
SecondaryCache,
EisaAdapter,
TcAdapter,
ScsiAdapter,
DtiAdapter,
MultiFunctionAdapter,
DiskController,
TapeController,
CdromController,
WormController,
SerialController,
NetworkController,
DisplayController,
ParallelController,
PointerController,
KeyboardController,
AudioController,
OtherController,
DiskPeripheral,
FloppyDiskPeripheral,
TapePeripheral,
ModemPeripheral,
MonitorPeripheral,
PrinterPeripheral,
PointerPeripheral,
KeyboardPeripheral,
TerminalPeripheral,
OtherPeripheral,
LinePeripheral,
NetworkPeripheral,
SystemMemory,
DockingInformation,
RealModeIrqRoutingTable,
MaximumType
} CONFIGURATION_TYPE, *PCONFIGURATION_TYPE;
typedef NTSTATUS
(*PIO_QUERY_DEVICE_ROUTINE)(
/*IN*/ PVOID Context,
/*IN*/ PUNICODE_STRING PathName,
/*IN*/ INTERFACE_TYPE BusType,
/*IN*/ ULONG BusNumber,
/*IN*/ PKEY_VALUE_FULL_INFORMATION *BusInformation,
/*IN*/ CONFIGURATION_TYPE ControllerType,
/*IN*/ ULONG ControllerNumber,
/*IN*/ PKEY_VALUE_FULL_INFORMATION *ControllerInformation,
/*IN*/ CONFIGURATION_TYPE PeripheralType,
/*IN*/ ULONG PeripheralNumber,
/*IN*/ PKEY_VALUE_FULL_INFORMATION *PeripheralInformation
);
typedef
enum _WORK_QUEUE_TYPE
{ CriticalWorkQueue,
DelayedWorkQueue,
HyperCriticalWorkQueue,
MaximumWorkQueue
} WORK_QUEUE_TYPE;
typedef VOID DDKAPI
(*PWORKER_THREAD_ROUTINE)(
/*IN*/ PVOID Parameter);
typedef
struct _WORK_QUEUE_ITEM
{ LIST_ENTRY List;
PWORKER_THREAD_ROUTINE WorkerRoutine;
PVOID Parameter;
} WORK_QUEUE_ITEM, *PWORK_QUEUE_ITEM;
typedef
enum _KBUGCHECK_BUFFER_DUMP_STATE
{ BufferEmpty,
BufferInserted,
BufferStarted,
BufferFinished,
BufferIncomplete
} KBUGCHECK_BUFFER_DUMP_STATE;
typedef VOID DDKAPI
(*PKBUGCHECK_CALLBACK_ROUTINE)(
/*IN*/ PVOID Buffer,
/*IN*/ ULONG Length);
typedef
struct _KBUGCHECK_CALLBACK_RECORD
{ LIST_ENTRY Entry;
PKBUGCHECK_CALLBACK_ROUTINE CallbackRoutine;
PVOID Buffer;
ULONG Length;
PUCHAR Component;
ULONG_PTR Checksum;
UCHAR State;
} KBUGCHECK_CALLBACK_RECORD, *PKBUGCHECK_CALLBACK_RECORD;
/* VOID
* KeInitializeCallbackRecord(
* IN PKBUGCHECK_CALLBACK_RECORD CallbackRecord)
*/
#define KeInitializeCallbackRecord(CallbackRecord) \
CallbackRecord->State = BufferEmpty;
typedef
enum _KDPC_IMPORTANCE
{ LowImportance,
MediumImportance,
HighImportance
} KDPC_IMPORTANCE;
typedef
enum _MEMORY_CACHING_TYPE_ORIG
{ MmFrameBufferCached = 2
} MEMORY_CACHING_TYPE_ORIG;
typedef
enum _MEMORY_CACHING_TYPE
{ MmNonCached = FALSE,
MmCached = TRUE,
MmWriteCombined = MmFrameBufferCached,
MmHardwareCoherentCached,
MmNonCachedUnordered,
MmUSWCCached,
MmMaximumCacheType
} MEMORY_CACHING_TYPE;
typedef
enum _MM_PAGE_PRIORITY
{ LowPagePriority = 0,
NormalPagePriority = 16,
HighPagePriority = 32
} MM_PAGE_PRIORITY;
typedef
enum _LOCK_OPERATION
{ IoReadAccess,
IoWriteAccess,
IoModifyAccess
} LOCK_OPERATION;
typedef
enum _MM_SYSTEM_SIZE
{ MmSmallSystem,
MmMediumSystem,
MmLargeSystem
} MM_SYSTEM_SIZE;
typedef
struct _OBJECT_HANDLE_INFORMATION
{ ULONG HandleAttributes;
ACCESS_MASK GrantedAccess;
} OBJECT_HANDLE_INFORMATION, *POBJECT_HANDLE_INFORMATION;
typedef
struct _CLIENT_ID
{ HANDLE UniqueProcess;
HANDLE UniqueThread;
} CLIENT_ID, *PCLIENT_ID;
typedef VOID DDKAPI
(*PKSTART_ROUTINE)(
/*IN*/ PVOID StartContext);
typedef VOID DDKAPI
(*PCREATE_PROCESS_NOTIFY_ROUTINE)(
/*IN*/ HANDLE ParentId,
/*IN*/ HANDLE ProcessId,
/*IN*/ BOOLEAN Create);
typedef VOID DDKAPI
(*PCREATE_THREAD_NOTIFY_ROUTINE)(
/*IN*/ HANDLE ProcessId,
/*IN*/ HANDLE ThreadId,
/*IN*/ BOOLEAN Create);
typedef
struct _IMAGE_INFO
{ _ANONYMOUS_UNION union
{ ULONG Properties;
_ANONYMOUS_STRUCT struct
{ ULONG ImageAddressingMode : 8;
ULONG SystemModeImage : 1;
ULONG ImageMappedToAllPids : 1;
ULONG Reserved : 22;
} DUMMYSTRUCTNAME;
} DUMMYUNIONNAME;
PVOID ImageBase;
ULONG ImageSelector;
SIZE_T ImageSize;
ULONG ImageSectionNumber;
} IMAGE_INFO, *PIMAGE_INFO;
#define IMAGE_ADDRESSING_MODE_32BIT 3
typedef VOID DDKAPI
(*PLOAD_IMAGE_NOTIFY_ROUTINE)(
/*IN*/ PUNICODE_STRING FullImageName,
/*IN*/ HANDLE ProcessId,
/*IN*/ PIMAGE_INFO ImageInfo);
typedef
enum _PROCESSINFOCLASS
{ ProcessBasicInformation,
ProcessQuotaLimits,
ProcessIoCounters,
ProcessVmCounters,
ProcessTimes,
ProcessBasePriority,
ProcessRaisePriority,
ProcessDebugPort,
ProcessExceptionPort,
ProcessAccessToken,
ProcessLdtInformation,
ProcessLdtSize,
ProcessDefaultHardErrorMode,
ProcessIoPortHandlers,
ProcessPooledUsageAndLimits,
ProcessWorkingSetWatch,
ProcessUserModeIOPL,
ProcessEnableAlignmentFaultFixup,
ProcessPriorityClass,
ProcessWx86Information,
ProcessHandleCount,
ProcessAffinityMask,
ProcessPriorityBoost,
ProcessDeviceMap,
ProcessSessionInformation,
ProcessForegroundInformation,
ProcessWow64Information,
ProcessImageFileName,
ProcessLUIDDeviceMapsEnabled,
ProcessBreakOnTermination,
ProcessDebugObjectHandle,
ProcessDebugFlags,
ProcessHandleTracing,
MaxProcessInfoClass
} PROCESSINFOCLASS;
typedef
enum _THREADINFOCLASS
{ ThreadBasicInformation,
ThreadTimes,
ThreadPriority,
ThreadBasePriority,
ThreadAffinityMask,
ThreadImpersonationToken,
ThreadDescriptorTableEntry,
ThreadEnableAlignmentFaultFixup,
ThreadEventPair_Reusable,
ThreadQuerySetWin32StartAddress,
ThreadZeroTlsCell,
ThreadPerformanceCount,
ThreadAmILastThread,
ThreadIdealProcessor,
ThreadPriorityBoost,
ThreadSetTlsArrayAddress,
ThreadIsIoPending,
ThreadHideFromDebugger,
ThreadBreakOnTermination,
MaxThreadInfoClass
} THREADINFOCLASS;
#define ES_SYSTEM_REQUIRED 0x00000001
#define ES_DISPLAY_REQUIRED 0x00000002
#define ES_USER_PRESENT 0x00000004
#define ES_CONTINUOUS 0x80000000
typedef ULONG EXECUTION_STATE;
typedef VOID DDKAPI
(*PREQUEST_POWER_COMPLETE)(
/*IN*/ PDEVICE_OBJECT DeviceObject,
/*IN*/ UCHAR MinorFunction,
/*IN*/ POWER_STATE PowerState,
/*IN*/ PVOID Context,
/*IN*/ PIO_STATUS_BLOCK IoStatus
);
typedef
enum _TRACE_INFORMATION_CLASS
{ TraceIdClass,
TraceHandleClass,
TraceEnableFlagsClass,
TraceEnableLevelClass,
GlobalLoggerHandleClass,
EventLoggerHandleClass,
AllLoggerHandlesClass,
TraceHandleByNameClass
} TRACE_INFORMATION_CLASS;
typedef NTSTATUS DDKAPI
(*PEX_CALLBACK_FUNCTION)(
/*IN*/ PVOID CallbackContext,
/*IN*/ PVOID Argument1,
/*IN*/ PVOID Argument2
);
/* Storage structures
*/
typedef
struct _DISK_SIGNATURE
{ ULONG PartitionStyle;
_ANONYMOUS_UNION union
{ struct
{ ULONG Signature;
ULONG CheckSum;
} Mbr;
struct
{ GUID DiskId;
} Gpt;
} DUMMYUNIONNAME;
} DISK_SIGNATURE, *PDISK_SIGNATURE;
typedef VOID DDKFASTAPI
(*PTIME_UPDATE_NOTIFY_ROUTINE)(
/*IN*/ HANDLE ThreadId,
/*IN*/ KPROCESSOR_MODE Mode
);
#define DBG_STATUS_CONTROL_C 1
#define DBG_STATUS_SYSRQ 2
#define DBG_STATUS_BUGCHECK_FIRST 3
#define DBG_STATUS_BUGCHECK_SECOND 4
#define DBG_STATUS_FATAL 5
#define DBG_STATUS_DEBUG_CONTROL 6
#define DBG_STATUS_WORKER 7
typedef
struct _PHYSICAL_MEMORY_RANGE
{ PHYSICAL_ADDRESS BaseAddress;
LARGE_INTEGER NumberOfBytes;
} PHYSICAL_MEMORY_RANGE, *PPHYSICAL_MEMORY_RANGE;
typedef ULONG_PTR
(*PDRIVER_VERIFIER_THUNK_ROUTINE)( /*IN*/ PVOID Context );
typedef
struct _DRIVER_VERIFIER_THUNK_PAIRS
{ PDRIVER_VERIFIER_THUNK_ROUTINE PristineRoutine;
PDRIVER_VERIFIER_THUNK_ROUTINE NewRoutine;
} DRIVER_VERIFIER_THUNK_PAIRS, *PDRIVER_VERIFIER_THUNK_PAIRS;
#define DRIVER_VERIFIER_SPECIAL_POOLING 0x0001
#define DRIVER_VERIFIER_FORCE_IRQL_CHECKING 0x0002
#define DRIVER_VERIFIER_INJECT_ALLOCATION_FAILURES 0x0004
#define DRIVER_VERIFIER_TRACK_POOL_ALLOCATIONS 0x0008
#define DRIVER_VERIFIER_IO_CHECKING 0x0010
#define RTL_RANGE_LIST_ADD_IF_CONFLICT 0x00000001
#define RTL_RANGE_LIST_ADD_SHARED 0x00000002
#define RTL_RANGE_LIST_SHARED_OK 0x00000001
#define RTL_RANGE_LIST_NULL_CONFLICT_OK 0x00000002
#define RTL_RANGE_LIST_SHARED_OK 0x00000001
#define RTL_RANGE_LIST_NULL_CONFLICT_OK 0x00000002
#define RTL_RANGE_LIST_MERGE_IF_CONFLICT RTL_RANGE_LIST_ADD_IF_CONFLICT
typedef
struct _RTL_RANGE
{ ULONGLONG Start;
ULONGLONG End;
PVOID UserData;
PVOID Owner;
UCHAR Attributes;
UCHAR Flags;
} RTL_RANGE, *PRTL_RANGE;
#define RTL_RANGE_SHARED 0x01
#define RTL_RANGE_CONFLICT 0x02
typedef
struct _RTL_RANGE_LIST
{ LIST_ENTRY ListHead;
ULONG Flags;
ULONG Count;
ULONG Stamp;
} RTL_RANGE_LIST, *PRTL_RANGE_LIST;
typedef
struct _RANGE_LIST_ITERATOR
{ PLIST_ENTRY RangeListHead;
PLIST_ENTRY MergedHead;
PVOID Current;
ULONG Stamp;
} RTL_RANGE_LIST_ITERATOR, *PRTL_RANGE_LIST_ITERATOR;
typedef BOOLEAN
(*PRTL_CONFLICT_RANGE_CALLBACK)(
/*IN*/ PVOID Context,
/*IN*/ PRTL_RANGE Range
);
#define HASH_STRING_ALGORITHM_DEFAULT 0
#define HASH_STRING_ALGORITHM_X65599 1
#define HASH_STRING_ALGORITHM_INVALID 0xffffffff
typedef
enum _SUITE_TYPE
{ SmallBusiness,
Enterprise,
BackOffice,
CommunicationServer,
TerminalServer,
SmallBusinessRestricted,
EmbeddedNT,
DataCenter,
SingleUserTS,
Personal,
Blade,
MaxSuiteType
} SUITE_TYPE;
typedef VOID DDKAPI
(*PTIMER_APC_ROUTINE)(
/*IN*/ PVOID TimerContext,
/*IN*/ ULONG TimerLowValue,
/*IN*/ LONG TimerHighValue
);
/* WMI structures
*/
typedef VOID DDKAPI
(*WMI_NOTIFICATION_CALLBACK)(
PVOID Wnode,
PVOID Context
);
/* Architecture specific structures
*/
#ifdef _X86_
typedef ULONG PFN_NUMBER, *PPFN_NUMBER;
#define PASSIVE_LEVEL 0
#define LOW_LEVEL 0
#define APC_LEVEL 1
#define DISPATCH_LEVEL 2
#define SYNCH_LEVEL 27
#define PROFILE_LEVEL 27
#define CLOCK1_LEVEL 28
#define CLOCK2_LEVEL 28
#define IPI_LEVEL 29
#define POWER_LEVEL 30
#define HIGH_LEVEL 31
typedef
struct _KPCR_TIB
{ PVOID ExceptionList; /* 00 */
PVOID StackBase; /* 04 */
PVOID StackLimit; /* 08 */
PVOID SubSystemTib; /* 0C */
_ANONYMOUS_UNION union
{ PVOID FiberData; /* 10 */
DWORD Version; /* 10 */
} DUMMYUNIONNAME;
PVOID ArbitraryUserPointer; /* 14 */
struct _NT_TIB *Self; /* 18 */
} KPCR_TIB, *PKPCR_TIB; /* 1C */
#define PCR_MINOR_VERSION 1
#define PCR_MAJOR_VERSION 1
typedef
struct _KPCR
{ KPCR_TIB Tib; /* 00 */
struct _KPCR *Self; /* 1C */
struct _KPRCB *PCRCB; /* 20 */
KIRQL Irql; /* 24 */
ULONG IRR; /* 28 */
ULONG IrrActive; /* 2C */
ULONG IDR; /* 30 */
PVOID KdVersionBlock; /* 34 */
PUSHORT IDT; /* 38 */
PUSHORT GDT; /* 3C */
struct _KTSS *TSS; /* 40 */
USHORT MajorVersion; /* 44 */
USHORT MinorVersion; /* 46 */
KAFFINITY SetMember; /* 48 */
ULONG StallScaleFactor; /* 4C */
UCHAR SpareUnused; /* 50 */
UCHAR Number; /* 51 */
} KPCR, *PKPCR; /* 54 */
typedef
struct _KFLOATING_SAVE
{ ULONG ControlWord;
ULONG StatusWord;
ULONG ErrorOffset;
ULONG ErrorSelector;
ULONG DataOffset;
ULONG DataSelector;
ULONG Cr0NpxState;
ULONG Spare1;
} KFLOATING_SAVE, *PKFLOATING_SAVE;
#define PAGE_SIZE 0x1000
#define PAGE_SHIFT 12L
extern NTOSAPI PVOID *MmHighestUserAddress;
extern NTOSAPI PVOID *MmSystemRangeStart;
extern NTOSAPI ULONG *MmUserProbeAddress;
#define MM_HIGHEST_USER_ADDRESS *MmHighestUserAddress
#define MM_SYSTEM_RANGE_START *MmSystemRangeStart
#define MM_USER_PROBE_ADDRESS *MmUserProbeAddress
#define MM_LOWEST_USER_ADDRESS (PVOID)0x10000
#define MM_LOWEST_SYSTEM_ADDRESS (PVOID)0xC0C00000
#define KI_USER_SHARED_DATA 0xffdf0000
#define SharedUserData ((KUSER_SHARED_DATA * CONST) KI_USER_SHARED_DATA)
#define EFLAG_SIGN 0x8000
#define EFLAG_ZERO 0x4000
#define EFLAG_SELECT (EFLAG_SIGN | EFLAG_ZERO)
#define RESULT_NEGATIVE ((EFLAG_SIGN & ~EFLAG_ZERO) & EFLAG_SELECT)
#define RESULT_ZERO ((~EFLAG_SIGN & EFLAG_ZERO) & EFLAG_SELECT)
#define RESULT_POSITIVE ((~EFLAG_SIGN & ~EFLAG_ZERO) & EFLAG_SELECT)
typedef
enum _INTERLOCKED_RESULT
{ ResultNegative = RESULT_NEGATIVE,
ResultZero = RESULT_ZERO,
ResultPositive = RESULT_POSITIVE
} INTERLOCKED_RESULT;
NTOSAPI KIRQL DDKAPI
KeGetCurrentIrql( VOID );
/* ULONG
* KeGetCurrentProcessorNumber(
* VOID)
*/
#define KeGetCurrentProcessorNumber() \
((ULONG)KeGetCurrentKPCR()->Number)
#if __USE_NTOSKRNL__
/* CAREFUL: These are exported from ntoskrnl.exe as __fastcall functions,
but are also exported from kernel32.dll and declared in winbase.h as
__stdcall */
#if !defined(__INTERLOCKED_DECLARED)
#define __INTERLOCKED_DECLARED
NTOSAPI LONG DDKFASTAPI
InterlockedIncrement( /*IN*/ LONG VOLATILE *Addend );
NTOSAPI LONG DDKFASTAPI
InterlockedDecrement( /*IN*/ LONG VOLATILE *Addend );
NTOSAPI LONG DDKFASTAPI
InterlockedCompareExchange(
/*IN OUT*/ PLONG VOLATILE Destination,
/*IN*/ LONG Exchange,
/*IN*/ LONG Comparand
);
NTOSAPI LONG DDKFASTAPI
InterlockedExchange(
/*IN OUT*/ PLONG VOLATILE Target,
/*IN*/ LONG Value
);
NTOSAPI LONG DDKFASTAPI
InterlockedExchangeAdd(
/*IN OUT*/ PLONG VOLATILE Addend,
/*IN*/ LONG Value
);
/* PVOID
* InterlockedExchangePointer(
* IN OUT PVOID VOLATILE *Target,
* IN PVOID Value)
*/
#define InterlockedExchangePointer(Target, Value) \
((PVOID) InterlockedExchange((PLONG) Target, (LONG) Value))
/* PVOID InterlockedCompareExchangePointer(
* IN OUT PVOID *Destination,
* IN PVOID Exchange,
* IN PVOID Comparand
* )
*/
#define InterlockedCompareExchangePointer(Destination, Exchange, Comparand) \
((PVOID) InterlockedCompareExchange((PLONG) Destination, (LONG) Exchange, (LONG) Comparand))
#if (_WIN32_WINNT >= _WIN32_WINNT_WINXP)
PSLIST_ENTRY DDKFASTAPI
InterlockedPopEntrySList( /*IN*/ PSLIST_HEADER ListHead );
NTOSAPI PSLIST_ENTRY DDKFASTAPI
InterlockedPushEntrySList(
/*IN*/ PSLIST_HEADER ListHead,
/*IN*/ PSLIST_ENTRY ListEntry
);
#endif /* _WIN32_WINNT >= _WIN32_WINNT_WINXP */
#endif /* !__INTERLOCKED_DECLARED */
#endif /* __USE_NTOSKRNL__ */
NTOSAPI VOID DDKFASTAPI
KefAcquireSpinLockAtDpcLevel( /*IN*/ PKSPIN_LOCK SpinLock );
NTOSAPI VOID DDKFASTAPI
KefReleaseSpinLockFromDpcLevel( /*IN*/ PKSPIN_LOCK SpinLock );
#define KeAcquireSpinLockAtDpcLevel(SpinLock) KefAcquireSpinLockAtDpcLevel(SpinLock)
#define KeReleaseSpinLockFromDpcLevel(SpinLock) KefReleaseSpinLockFromDpcLevel(SpinLock)
#define RtlCopyMemoryNonTemporal RtlCopyMemory
#define KeGetDcacheFillSize() 1L
#endif /* _X86_ */
/* Utility functions
*/
#define ARGUMENT_PRESENT(ArgumentPointer) \
((BOOLEAN) ((PVOID)ArgumentPointer != (PVOID)NULL))
/* ULONG BYTE_OFFSET( IN PVOID Va )
*/
#define BYTE_OFFSET(Va) \
((ULONG) ((ULONG_PTR) (Va) & (PAGE_SIZE - 1)))
/* ULONG BYTES_TO_PAGES( IN ULONG Size )
*/
#define BYTES_TO_PAGES(Size) \
((ULONG) ((ULONG_PTR) (Size) >> PAGE_SHIFT) + (((ULONG) (Size) & (PAGE_SIZE - 1)) != 0))
/* PCHAR CONTAINING_RECORD(
* IN PCHAR Address,
* IN TYPE Type,
* IN PCHAR Field
* );
*/
#ifndef CONTAINING_RECORD
#define CONTAINING_RECORD(Address, Type, Field) \
((Type *) (((ULONG_PTR) Address) - FIELD_OFFSET(Type, Field)))
#endif
/* LONG FIELD_OFFSET( IN TYPE Type, IN PCHAR Field );
*/
#ifndef FIELD_OFFSET
#define FIELD_OFFSET(Type, Field) \
((LONG) (&(((Type *) 0)->Field)))
#endif
/* PVOID PAGE_ALIGN( IN PVOID Va )
*/
#define PAGE_ALIGN(Va) \
((PVOID) ((ULONG_PTR)(Va) & ~(PAGE_SIZE - 1)))
/* ULONG_PTR ROUND_TO_PAGES( IN ULONG_PTR Size )
*/
#define ROUND_TO_PAGES(Size) \
((ULONG_PTR) (((ULONG_PTR) Size + PAGE_SIZE - 1) & ~(PAGE_SIZE - 1)))
NTOSAPI VOID DDKAPI
RtlAssert(
/*IN*/ PVOID FailedAssertion,
/*IN*/ PVOID FileName,
/*IN*/ ULONG LineNumber,
/*IN*/ PCHAR Message
);
#ifdef DBG
#define ASSERT(exp) \
((!(exp)) ? (RtlAssert( #exp, __FILE__, __LINE__, NULL ), FALSE) : TRUE)
#define ASSERTMSG(msg, exp) \
((!(exp)) ? (RtlAssert( #exp, __FILE__, __LINE__, msg ), FALSE) : TRUE)
#define RTL_SOFT_ASSERT(exp) \
((!(_exp)) \
? (DbgPrint("%s(%d): Soft assertion failed\n Expression: %s\n",__FILE__,__LINE__,#exp),FALSE) \
: TRUE \
)
#define RTL_SOFT_ASSERTMSG(msg, exp) \
((!(exp)) \
? (DbgPrint("%s(%d): Soft assertion failed\n Expression: %s\n Message: %s\n", \
__FILE__, __LINE__, #exp, (msg)), FALSE) \
: TRUE \
)
#define RTL_VERIFY(exp) ASSERT(exp)
#define RTL_VERIFYMSG(msg, exp) ASSERT(msg, exp)
#define RTL_SOFT_VERIFY(exp) RTL_SOFT_ASSERT(exp)
#define RTL_SOFT_VERIFYMSG(msg, exp) RTL_SOFT_ASSERTMSG(msg, exp)
#else /* !DBG */
#define ASSERT(exp) ((VOID) 0)
#define ASSERTMSG(msg, exp) ((VOID) 0)
#define RTL_SOFT_ASSERT(exp) ((VOID) 0)
#define RTL_SOFT_ASSERTMSG(msg, exp) ((VOID) 0)
#define RTL_VERIFY(exp) ((exp) ? TRUE : FALSE)
#define RTL_VERIFYMSG(msg, exp) ((exp) ? TRUE : FALSE)
#define RTL_SOFT_VERIFY(exp) ((exp) ? TRUE : FALSE)
#define RTL_SOFT_VERIFYMSG(msg, exp) ((exp) ? TRUE : FALSE)
#endif /* DBG */
/* Driver support routines
*/
/** Runtime library routines **/
/* VOID InitializeListHead( IN PLIST_ENTRY ListHead )
*/
#define InitializeListHead(_ListHead) \
{ (_ListHead)->Flink = (_ListHead); \
(_ListHead)->Blink = (_ListHead); \
}
/* VOID InsertHeadList(
* IN PLIST_ENTRY ListHead,
* IN PLIST_ENTRY Entry
* )
*/
#define InsertHeadList(_ListHead, _Entry) \
{ PLIST_ENTRY _OldFlink; \
_OldFlink = (_ListHead)->Flink; \
(_Entry)->Flink = _OldFlink; \
(_Entry)->Blink = (_ListHead); \
_OldFlink->Blink = (_Entry); \
(_ListHead)->Flink = (_Entry); \
}
/* VOID InsertTailList(
* IN PLIST_ENTRY ListHead,
* IN PLIST_ENTRY Entry
* )
*/
#define InsertTailList(_ListHead, _Entry) \
{ PLIST_ENTRY _OldBlink; \
_OldBlink = (_ListHead)->Blink; \
(_Entry)->Flink = (_ListHead); \
(_Entry)->Blink = _OldBlink; \
_OldBlink->Flink = (_Entry); \
(_ListHead)->Blink = (_Entry); \
}
/* BOOLEAN IsListEmpty( IN PLIST_ENTRY ListHead )
*/
#define IsListEmpty(_ListHead) \
((_ListHead)->Flink == (_ListHead))
static __inline__ PSINGLE_LIST_ENTRY
PopEntryList( /*IN*/ PSINGLE_LIST_ENTRY ListHead )
{
PSINGLE_LIST_ENTRY Entry;
Entry = ListHead->Next;
if (Entry != NULL)
{
ListHead->Next = Entry->Next;
}
return Entry;
}
/* VOID PushEntryList(
* IN PSINGLE_LIST_ENTRY ListHead,
* IN PSINGLE_LIST_ENTRY Entry
* )
*/
#define PushEntryList(_ListHead, _Entry) \
{ (_Entry)->Next = (_ListHead)->Next; \
(_ListHead)->Next = (_Entry); \
}
/* VOID RemoveEntryList( IN PLIST_ENTRY Entry )
*/
#define RemoveEntryList(_Entry) \
{ PLIST_ENTRY _OldFlink; \
PLIST_ENTRY _OldBlink; \
_OldFlink = (_Entry)->Flink; \
_OldBlink = (_Entry)->Blink; \
_OldFlink->Blink = _OldBlink; \
_OldBlink->Flink = _OldFlink; \
(_Entry)->Flink = NULL; \
(_Entry)->Blink = NULL; \
}
static __inline__ PLIST_ENTRY
RemoveHeadList( /*IN*/ PLIST_ENTRY ListHead )
{
PLIST_ENTRY OldFlink;
PLIST_ENTRY OldBlink;
PLIST_ENTRY Entry;
Entry = ListHead->Flink;
OldFlink = ListHead->Flink->Flink;
OldBlink = ListHead->Flink->Blink;
OldFlink->Blink = OldBlink;
OldBlink->Flink = OldFlink;
if (Entry != ListHead)
{
Entry->Flink = NULL;
Entry->Blink = NULL;
}
return Entry;
}
static __inline__ PLIST_ENTRY
RemoveTailList( /*IN*/ PLIST_ENTRY ListHead )
{
PLIST_ENTRY OldFlink;
PLIST_ENTRY OldBlink;
PLIST_ENTRY Entry;
Entry = ListHead->Blink;
OldFlink = ListHead->Blink->Flink;
OldBlink = ListHead->Blink->Blink;
OldFlink->Blink = OldBlink;
OldBlink->Flink = OldFlink;
if (Entry != ListHead)
{
Entry->Flink = NULL;
Entry->Blink = NULL;
}
return Entry;
}
/* USHORT QueryDepthSList( IN PSLIST_HEADER SListHead )
*/
#define QueryDepthSList(_SListHead) \
((USHORT) ((_SListHead)->Alignment & 0xffff))
#define InterlockedFlushSList(ListHead) ExInterlockedFlushSList(ListHead)
NTOSAPI ULONG DDKAPI
RtlAnsiStringToUnicodeSize( /*IN*/ PANSI_STRING AnsiString );
NTOSAPI NTSTATUS DDKAPI
RtlAddRange(
/*IN OUT*/ PRTL_RANGE_LIST RangeList,
/*IN*/ ULONGLONG Start,
/*IN*/ ULONGLONG End,
/*IN*/ UCHAR Attributes,
/*IN*/ ULONG Flags,
/*IN*/ PVOID UserData /*OPTIONAL*/,
/*IN*/ PVOID Owner /*OPTIONAL*/
);
NTOSAPI NTSTATUS DDKAPI
RtlAnsiStringToUnicodeString(
/*IN OUT*/ PUNICODE_STRING DestinationString,
/*IN*/ PANSI_STRING SourceString,
/*IN*/ BOOLEAN AllocateDestinationString
);
NTOSAPI NTSTATUS DDKAPI
RtlAppendUnicodeStringToString(
/*IN OUT*/ PUNICODE_STRING Destination,
/*IN*/ PUNICODE_STRING Source
);
NTOSAPI NTSTATUS DDKAPI
RtlAppendUnicodeToString(
/*IN OUT*/ PUNICODE_STRING Destination,
/*IN*/ PCWSTR Source
);
NTOSAPI BOOLEAN DDKAPI
RtlAreBitsClear(
/*IN*/ PRTL_BITMAP BitMapHeader,
/*IN*/ ULONG StartingIndex,
/*IN*/ ULONG Length
);
NTOSAPI BOOLEAN DDKAPI
RtlAreBitsSet(
/*IN*/ PRTL_BITMAP BitMapHeader,
/*IN*/ ULONG StartingIndex,
/*IN*/ ULONG Length
);
NTOSAPI NTSTATUS DDKAPI
RtlCharToInteger(
/*IN*/ PCSZ String,
/*IN*/ ULONG Base /*OPTIONAL*/,
/*IN OUT*/ PULONG Value
);
NTOSAPI ULONG DDKAPI
RtlCheckBit(
/*IN*/ PRTL_BITMAP BitMapHeader,
/*IN*/ ULONG BitPosition
);
NTOSAPI NTSTATUS DDKAPI
RtlCheckRegistryKey(
/*IN*/ ULONG RelativeTo,
/*IN*/ PWSTR Path
);
NTOSAPI VOID DDKAPI
RtlClearAllBits( /*IN*/ PRTL_BITMAP BitMapHeader );
NTOSAPI VOID DDKAPI
RtlClearBit( PRTL_BITMAP BitMapHeader, ULONG BitNumber );
NTOSAPI VOID DDKAPI
RtlClearBits(
/*IN*/ PRTL_BITMAP BitMapHeader,
/*IN*/ ULONG StartingIndex,
/*IN*/ ULONG NumberToClear
);
NTOSAPI SIZE_T DDKAPI
RtlCompareMemory(
/*IN*/ CONST VOID *Source1,
/*IN*/ CONST VOID *Source2,
/*IN*/ SIZE_T Length
);
NTOSAPI LONG DDKAPI
RtlCompareString(
/*IN*/ PSTRING String1,
/*IN*/ PSTRING String2,
BOOLEAN CaseInSensitive
);
NTOSAPI LONG DDKAPI
RtlCompareUnicodeString(
/*IN*/ PUNICODE_STRING String1,
/*IN*/ PUNICODE_STRING String2,
/*IN*/ BOOLEAN CaseInSensitive
);
NTOSAPI LARGE_INTEGER DDKAPI
RtlConvertLongToLargeInteger( /*IN*/ LONG SignedInteger );
NTOSAPI LUID DDKAPI
RtlConvertLongToLuid( /*IN*/ LONG Long );
NTOSAPI LARGE_INTEGER DDKAPI
RtlConvertUlongToLargeInteger( /*IN*/ ULONG UnsignedInteger );
NTOSAPI LUID DDKAPI
RtlConvertUlongToLuid( ULONG Ulong );
/* VOID RtlCopyMemory(
* IN VOID UNALIGNED *Destination,
* IN CONST VOID UNALIGNED *Source,
* IN SIZE_T Length
* )
*/
#ifndef RtlCopyMemory
#define RtlCopyMemory(Destination, Source, Length) \
memcpy(Destination, Source, Length)
#endif
#ifndef RtlCopyBytes
#define RtlCopyBytes RtlCopyMemory
#endif
NTOSAPI VOID DDKAPI
RtlCopyMemory32(
/*IN*/ VOID UNALIGNED *Destination,
/*IN*/ CONST VOID UNALIGNED *Source,
/*IN*/ ULONG Length
);
NTOSAPI NTSTATUS DDKAPI
RtlCopyRangeList(
/*OUT*/ PRTL_RANGE_LIST CopyRangeList,
/*IN*/ PRTL_RANGE_LIST RangeList
);
NTOSAPI VOID DDKAPI
RtlCopyString(
/*IN OUT*/ PSTRING DestinationString,
/*IN*/ PSTRING SourceString /*OPTIONAL*/
);
NTOSAPI VOID DDKAPI
RtlCopyUnicodeString(
/*IN OUT*/ PUNICODE_STRING DestinationString,
/*IN*/ PUNICODE_STRING SourceString
);
NTOSAPI NTSTATUS DDKAPI
RtlCreateRegistryKey( /*IN*/ ULONG RelativeTo, /*IN*/ PWSTR Path );
NTOSAPI NTSTATUS DDKAPI
RtlCreateSecurityDescriptor(
/*IN OUT*/ PSECURITY_DESCRIPTOR SecurityDescriptor,
/*IN*/ ULONG Revision
);
NTOSAPI NTSTATUS DDKAPI
RtlDeleteOwnersRanges(
/*IN OUT*/ PRTL_RANGE_LIST RangeList,
/*IN*/ PVOID Owner
);
NTOSAPI NTSTATUS DDKAPI
RtlDeleteRange(
/*IN OUT*/ PRTL_RANGE_LIST RangeList,
/*IN*/ ULONGLONG Start,
/*IN*/ ULONGLONG End,
/*IN*/ PVOID Owner
);
NTOSAPI NTSTATUS DDKAPI
RtlDeleteRegistryValue(
/*IN*/ ULONG RelativeTo,
/*IN*/ PCWSTR Path,
/*IN*/ PCWSTR ValueName
);
NTOSAPI BOOL DDKAPI
RtlDosPathNameToNtPathName_U(
/*IN*/ PCWSTR DosPathName,
/*OUT*/ PUNICODE_STRING NtPathName,
/*OUT*/ PCWSTR *NtFileNamePart,
/*OUT*/ VOID *DirectoryInfo
);
/* BOOLEAN RtlEqualLuid(
* IN LUID Luid1,
* IN LUID Luid2
* )
*/
#define RtlEqualLuid(_Luid1, _Luid2) \
((Luid1.LowPart == Luid2.LowPart) && (Luid1.HighPart == Luid2.HighPart))
/* ULONG RtlEqualMemory(
* IN VOID UNALIGNED *Destination,
* IN CONST VOID UNALIGNED *Source,
* IN SIZE_T Length
* )
*/
#define RtlEqualMemory(Destination, Source, Length) (!memcmp(Destination, Source, Length))
NTOSAPI BOOLEAN DDKAPI
RtlEqualString(
/*IN*/ PSTRING String1,
/*IN*/ PSTRING String2,
/*IN*/ BOOLEAN CaseInSensitive
);
NTOSAPI BOOLEAN DDKAPI
RtlEqualUnicodeString(
/*IN*/ CONST UNICODE_STRING *String1,
/*IN*/ CONST UNICODE_STRING *String2,
/*IN*/ BOOLEAN CaseInSensitive
);
/* VOID RtlFillMemory(
* IN VOID UNALIGNED *Destination,
* IN SIZE_T Length,
* IN UCHAR Fill
* )
*/
#ifndef RtlFillMemory
#define RtlFillMemory(Destination, Length, Fill) \
memset(Destination, Fill, Length)
#endif
#ifndef RtlFillBytes
#define RtlFillBytes RtlFillMemory
#endif
NTOSAPI ULONG DDKAPI
RtlFindClearBits(
/*IN*/ PRTL_BITMAP BitMapHeader,
/*IN*/ ULONG NumberToFind,
/*IN*/ ULONG HintIndex
);
NTOSAPI ULONG DDKAPI
RtlFindClearBitsAndSet(
/*IN*/ PRTL_BITMAP BitMapHeader,
/*IN*/ ULONG NumberToFind,
/*IN*/ ULONG HintIndex
);
NTOSAPI ULONG DDKAPI
RtlFindClearRuns(
/*IN*/ PRTL_BITMAP BitMapHeader,
/*OUT*/ PRTL_BITMAP_RUN RunArray,
/*IN*/ ULONG SizeOfRunArray,
/*IN*/ BOOLEAN LocateLongestRuns
);
NTOSAPI ULONG DDKAPI
RtlFindFirstRunClear(
/*IN*/ PRTL_BITMAP BitMapHeader,
/*OUT*/ PULONG StartingIndex
);
NTOSAPI ULONG DDKAPI
RtlFindLastBackwardRunClear(
/*IN*/ PRTL_BITMAP BitMapHeader,
/*IN*/ ULONG FromIndex,
/*OUT*/ PULONG StartingRunIndex
);
NTOSAPI CCHAR DDKAPI
RtlFindLeastSignificantBit( /*IN*/ ULONGLONG Set );
NTOSAPI ULONG DDKAPI
RtlFindLongestRunClear(
/*IN*/ PRTL_BITMAP BitMapHeader,
/*OUT*/ PULONG StartingIndex
);
NTOSAPI CCHAR DDKAPI
RtlFindMostSignificantBit( /*IN*/ ULONGLONG Set );
NTOSAPI ULONG DDKAPI
RtlFindNextForwardRunClear(
/*IN*/ PRTL_BITMAP BitMapHeader,
/*IN*/ ULONG FromIndex,
/*OUT*/ PULONG StartingRunIndex
);
NTOSAPI NTSTATUS DDKAPI
RtlFindRange(
/*IN*/ PRTL_RANGE_LIST RangeList,
/*IN*/ ULONGLONG Minimum,
/*IN*/ ULONGLONG Maximum,
/*IN*/ ULONG Length,
/*IN*/ ULONG Alignment,
/*IN*/ ULONG Flags,
/*IN*/ UCHAR AttributeAvailableMask,
/*IN*/ PVOID Context /*OPTIONAL*/,
/*IN*/ PRTL_CONFLICT_RANGE_CALLBACK Callback /*OPTIONAL*/,
/*OUT*/ PULONGLONG Start
);
NTOSAPI ULONG DDKAPI
RtlFindSetBits(
/*IN*/ PRTL_BITMAP BitMapHeader,
/*IN*/ ULONG NumberToFind,
/*IN*/ ULONG HintIndex
);
NTOSAPI ULONG DDKAPI
RtlFindSetBitsAndClear(
/*IN*/ PRTL_BITMAP BitMapHeader,
/*IN*/ ULONG NumberToFind,
/*IN*/ ULONG HintIndex
);
NTOSAPI VOID DDKAPI
RtlFreeAnsiString( /*IN*/ PANSI_STRING AnsiString );
NTOSAPI VOID DDKAPI
RtlFreeRangeList( /*IN*/ PRTL_RANGE_LIST RangeList );
NTOSAPI VOID DDKAPI
RtlFreeUnicodeString( /*IN*/ PUNICODE_STRING UnicodeString );
NTOSAPI VOID DDKAPI
RtlGetCallersAddress(
/*OUT*/ PVOID *CallersAddress,
/*OUT*/ PVOID *CallersCaller
);
NTOSAPI NTSTATUS DDKAPI
RtlGetVersion( /*IN OUT*/ PRTL_OSVERSIONINFOW lpVersionInformation );
NTOSAPI NTSTATUS DDKAPI
RtlGetFirstRange(
/*IN*/ PRTL_RANGE_LIST RangeList,
/*OUT*/ PRTL_RANGE_LIST_ITERATOR Iterator,
/*OUT*/ PRTL_RANGE *Range
);
NTOSAPI NTSTATUS DDKAPI
RtlGetNextRange(
/*IN OUT*/ PRTL_RANGE_LIST_ITERATOR Iterator,
/*OUT*/ PRTL_RANGE *Range,
/*IN*/ BOOLEAN MoveForwards
);
#define FOR_ALL_RANGES(RangeList, Iterator, Current) \
for (RtlGetFirstRange((RangeList), (Iterator), &(Current)); \
(Current) != NULL; \
RtlGetNextRange((Iterator), &(Current), TRUE))
#define FOR_ALL_RANGES_BACKWARDS(RangeList, Iterator, Current) \
for (RtlGetLastRange((RangeList), (Iterator), &(Current)); \
(Current) != NULL; \
RtlGetNextRange((Iterator), &(Current), FALSE))
NTOSAPI NTSTATUS DDKAPI
RtlGUIDFromString(
/*IN*/ PUNICODE_STRING GuidString,
/*OUT*/ GUID *Guid
);
NTOSAPI NTSTATUS DDKAPI
RtlHashUnicodeString(
/*IN*/ CONST UNICODE_STRING *String,
/*IN*/ BOOLEAN CaseInSensitive,
/*IN*/ ULONG HashAlgorithm,
/*OUT*/ PULONG HashValue
);
NTOSAPI VOID DDKAPI
RtlInitAnsiString(
/*IN OUT*/ PANSI_STRING DestinationString,
/*IN*/ PCSZ SourceString
);
NTOSAPI VOID DDKAPI
RtlInitializeBitMap(
/*IN*/ PRTL_BITMAP BitMapHeader,
/*IN*/ PULONG BitMapBuffer,
/*IN*/ ULONG SizeOfBitMap
);
NTOSAPI VOID DDKAPI
RtlInitializeRangeList( /*IN OUT*/ PRTL_RANGE_LIST RangeList );
NTOSAPI VOID DDKAPI
RtlInitString(
/*IN OUT*/ PSTRING DestinationString,
/*IN*/ PCSZ SourceString
);
NTOSAPI VOID DDKAPI
RtlInitUnicodeString(
/*IN OUT*/ PUNICODE_STRING DestinationString,
/*IN*/ PCWSTR SourceString
);
NTOSAPI NTSTATUS DDKAPI
RtlInt64ToUnicodeString(
/*IN*/ ULONGLONG Value,
/*IN*/ ULONG Base /*OPTIONAL*/,
/*IN OUT*/ PUNICODE_STRING String
);
NTOSAPI NTSTATUS DDKAPI
RtlIntegerToUnicodeString(
/*IN*/ ULONG Value,
/*IN*/ ULONG Base /*OPTIONAL*/,
/*IN OUT*/ PUNICODE_STRING String
);
NTOSAPI NTSTATUS DDKAPI
RtlIntPtrToUnicodeString(
PLONG Value,
ULONG Base /*OPTIONAL*/,
PUNICODE_STRING String
);
NTOSAPI NTSTATUS DDKAPI
RtlInvertRangeList(
/*OUT*/ PRTL_RANGE_LIST InvertedRangeList,
/*IN*/ PRTL_RANGE_LIST RangeList
);
NTOSAPI NTSTATUS DDKAPI
RtlIsRangeAvailable(
/*IN*/ PRTL_RANGE_LIST RangeList,
/*IN*/ ULONGLONG Start,
/*IN*/ ULONGLONG End,
/*IN*/ ULONG Flags,
/*IN*/ UCHAR AttributeAvailableMask,
/*IN*/ PVOID Context /*OPTIONAL*/,
/*IN*/ PRTL_CONFLICT_RANGE_CALLBACK Callback /*OPTIONAL*/,
/*OUT*/ PBOOLEAN Available
);
/* BOOLEAN RtlIsZeroLuid( IN PLUID L1 )
*/
#define RtlIsZeroLuid(_L1) \
((BOOLEAN) ((!(_L1)->LowPart) && (!(_L1)->HighPart)))
NTOSAPI ULONG DDKAPI
RtlLengthSecurityDescriptor( /*IN*/ PSECURITY_DESCRIPTOR SecurityDescriptor );
NTOSAPI VOID DDKAPI
RtlMapGenericMask(
/*IN OUT*/ PACCESS_MASK AccessMask,
/*IN*/ PGENERIC_MAPPING GenericMapping
);
NTOSAPI NTSTATUS DDKAPI
RtlMergeRangeLists(
/*OUT*/ PRTL_RANGE_LIST MergedRangeList,
/*IN*/ PRTL_RANGE_LIST RangeList1,
/*IN*/ PRTL_RANGE_LIST RangeList2,
/*IN*/ ULONG Flags
);
/* VOID RtlMoveMemory(
* IN VOID UNALIGNED *Destination,
* IN CONST VOID UNALIGNED *Source,
* IN SIZE_T Length
* )
*/
#define RtlMoveMemory memmove
NTOSAPI ULONG DDKAPI
RtlNumberOfClearBits( /*IN*/ PRTL_BITMAP BitMapHeader );
NTOSAPI ULONG DDKAPI
RtlNumberOfSetBits( /*IN*/ PRTL_BITMAP BitMapHeader );
NTOSAPI VOID DDKFASTAPI
RtlPrefetchMemoryNonTemporal( /*IN*/ PVOID Source, /*IN*/ SIZE_T Length );
NTOSAPI BOOLEAN DDKAPI
RtlPrefixUnicodeString(
/*IN*/ PUNICODE_STRING String1,
/*IN*/ PUNICODE_STRING String2,
/*IN*/ BOOLEAN CaseInSensitive
);
NTOSAPI NTSTATUS DDKAPI
RtlQueryRegistryValues(
/*IN*/ ULONG RelativeTo,
/*IN*/ PCWSTR Path,
/*IN*/ PRTL_QUERY_REGISTRY_TABLE QueryTable,
/*IN*/ PVOID Context,
/*IN*/ PVOID Environment /*OPTIONAL*/
);
NTOSAPI VOID DDKAPI
RtlRetrieveUlong(
/*IN OUT*/ PULONG DestinationAddress,
/*IN*/ PULONG SourceAddress
);
NTOSAPI VOID DDKAPI
RtlRetrieveUshort(
/*IN OUT*/ PUSHORT DestinationAddress,
/*IN*/ PUSHORT SourceAddress
);
NTOSAPI VOID DDKAPI
RtlSetAllBits( /*IN*/ PRTL_BITMAP BitMapHeader );
NTOSAPI VOID DDKAPI
RtlSetBit( PRTL_BITMAP BitMapHeader, ULONG BitNumber );
NTOSAPI VOID DDKAPI
RtlSetBits(
/*IN*/ PRTL_BITMAP BitMapHeader,
/*IN*/ ULONG StartingIndex,
/*IN*/ ULONG NumberToSet
);
NTOSAPI NTSTATUS DDKAPI
RtlSetDaclSecurityDescriptor(
/*IN OUT*/ PSECURITY_DESCRIPTOR SecurityDescriptor,
/*IN*/ BOOLEAN DaclPresent,
/*IN*/ PACL Dacl /*OPTIONAL*/,
/*IN*/ BOOLEAN DaclDefaulted /*OPTIONAL*/
);
NTOSAPI VOID DDKAPI
RtlStoreUlong( /*IN*/ PULONG Address, /*IN*/ ULONG Value );
NTOSAPI VOID DDKAPI
RtlStoreUlonglong( /*IN OUT*/ PULONGLONG Address, ULONGLONG Value );
NTOSAPI VOID DDKAPI
RtlStoreUlongPtr( /*IN OUT*/ PULONG_PTR Address, /*IN*/ ULONG_PTR Value );
NTOSAPI VOID DDKAPI
RtlStoreUshort( /*IN*/ PUSHORT Address, /*IN*/ USHORT Value );
NTOSAPI NTSTATUS DDKAPI
RtlStringFromGUID( /*IN*/ REFGUID Guid, /*OUT*/ PUNICODE_STRING GuidString );
#define RtlStringCbCopyA(dst, dst_len, src) strncpy(dst, src, dst_len)
#define RtlStringCbPrintfA(args...) snprintf(args)
#define RtlStringCbVPrintfA(args...) vsnprintf(args)
NTOSAPI BOOLEAN DDKAPI
RtlTestBit( /*IN*/ PRTL_BITMAP BitMapHeader, /*IN*/ ULONG BitNumber );
NTOSAPI BOOLEAN DDKAPI
RtlTimeFieldsToTime(
/*IN*/ PTIME_FIELDS TimeFields,
/*IN*/ PLARGE_INTEGER Time
);
NTOSAPI VOID DDKAPI
RtlTimeToTimeFields(
/*IN*/ PLARGE_INTEGER Time,
/*IN*/ PTIME_FIELDS TimeFields
);
NTOSAPI ULONG DDKFASTAPI
RtlUlongByteSwap( /*IN*/ ULONG Source );
NTOSAPI ULONGLONG DDKFASTAPI
RtlUlonglongByteSwap( /*IN*/ ULONGLONG Source );
NTOSAPI ULONG DDKAPI
RtlUnicodeStringToAnsiSize( /*IN*/ PUNICODE_STRING UnicodeString );
NTOSAPI NTSTATUS DDKAPI
RtlUnicodeStringToAnsiString(
/*IN OUT*/ PANSI_STRING DestinationString,
/*IN*/ PUNICODE_STRING SourceString,
/*IN*/ BOOLEAN AllocateDestinationString
);
NTOSAPI NTSTATUS DDKAPI
RtlUnicodeStringToInteger(
/*IN*/ PUNICODE_STRING String,
/*IN*/ ULONG Base /*OPTIONAL*/,
/*OUT*/ PULONG Value
);
NTOSAPI WCHAR DDKAPI
RtlUpcaseUnicodeChar( /*IN*/ WCHAR SourceCharacter );
NTOSAPI NTSTATUS DDKAPI
RtlUpcaseUnicodeString(
/*IN OUT*/ PUNICODE_STRING DestinationString /*OPTIONAL*/,
/*IN*/ PCUNICODE_STRING SourceString,
/*IN*/ BOOLEAN AllocateDestinationString
);
NTOSAPI CHAR DDKAPI
RtlUpperChar( /*IN*/ CHAR Character );
NTOSAPI VOID DDKAPI
RtlUpperString(
/*IN OUT*/ PSTRING DestinationString,
/*IN*/ PSTRING SourceString
);
NTOSAPI USHORT DDKFASTAPI
RtlUshortByteSwap( /*IN*/ USHORT Source );
NTOSAPI BOOLEAN DDKAPI
RtlValidRelativeSecurityDescriptor(
/*IN*/ PSECURITY_DESCRIPTOR SecurityDescriptorInput,
/*IN*/ ULONG SecurityDescriptorLength,
/*IN*/ SECURITY_INFORMATION RequiredInformation
);
NTOSAPI BOOLEAN DDKAPI
RtlValidSecurityDescriptor( /*IN*/ PSECURITY_DESCRIPTOR SecurityDescriptor );
NTOSAPI NTSTATUS DDKAPI
RtlVerifyVersionInfo(
/*IN*/ PRTL_OSVERSIONINFOEXW VersionInfo,
/*IN*/ ULONG TypeMask,
/*IN*/ ULONGLONG ConditionMask
);
NTOSAPI NTSTATUS DDKAPI
RtlVolumeDeviceToDosName(
/*IN*/ PVOID VolumeDeviceObject,
/*OUT*/ PUNICODE_STRING DosName
);
NTOSAPI ULONG DDKAPI
RtlWalkFrameChain(
/*OUT*/ PVOID *Callers,
/*IN*/ ULONG Count,
/*IN*/ ULONG Flags
);
NTOSAPI NTSTATUS DDKAPI
RtlWriteRegistryValue(
/*IN*/ ULONG RelativeTo,
/*IN*/ PCWSTR Path,
/*IN*/ PCWSTR ValueName,
/*IN*/ ULONG ValueType,
/*IN*/ PVOID ValueData,
/*IN*/ ULONG ValueLength
);
NTOSAPI ULONG DDKAPI
RtlxUnicodeStringToAnsiSize( /*IN*/ PUNICODE_STRING UnicodeString );
#ifndef RtlZeroMemory
/* VOID RtlZeroMemory(
* IN VOID UNALIGNED *Destination,
* IN SIZE_T Length
* )
*/
#define RtlZeroMemory(Destination, Length) \
memset(Destination, 0, Length)
#endif
#ifndef RtlZeroBytes
#define RtlZeroBytes RtlZeroMemory
#endif
/** Executive support routines **/
NTOSAPI VOID DDKFASTAPI
ExAcquireFastMutex( /*IN*/ PFAST_MUTEX FastMutex );
NTOSAPI VOID DDKFASTAPI
ExAcquireFastMutexUnsafe( /*IN*/ PFAST_MUTEX FastMutex );
NTOSAPI BOOLEAN DDKAPI
ExAcquireResourceExclusiveLite(
/*IN*/ PERESOURCE Resource,
/*IN*/ BOOLEAN Wait
);
NTOSAPI BOOLEAN DDKAPI
ExAcquireResourceSharedLite( /*IN*/ PERESOURCE Resource, /*IN*/ BOOLEAN Wait );
NTOSAPI BOOLEAN DDKAPI
ExAcquireSharedStarveExclusive(
/*IN*/ PERESOURCE Resource,
/*IN*/ BOOLEAN Wait
);
NTOSAPI BOOLEAN DDKAPI
ExAcquireSharedWaitForExclusive(
/*IN*/ PERESOURCE Resource,
/*IN*/ BOOLEAN Wait
);
NTOSAPI PSINGLE_LIST_ENTRY DDKFASTAPI
ExInterlockedPopEntrySList(
/*IN*/ PSLIST_HEADER ListHead,
/*IN*/ PKSPIN_LOCK Lock
);
NTOSAPI PSINGLE_LIST_ENTRY DDKFASTAPI
ExInterlockedPushEntrySList(
/*IN*/ PSLIST_HEADER ListHead,
/*IN*/ PSINGLE_LIST_ENTRY ListEntry,
/*IN*/ PKSPIN_LOCK Lock
);
#if (__USE_NTOSKRNL__) && (_WIN32_WINNT >= _WIN32_WINNT_WINXP)
#define ExInterlockedPopEntrySList(_ListHead, _Lock) \
InterlockedPopEntrySList(_ListHead)
#define ExInterlockedPushEntrySList(_ListHead, _ListEntry, _Lock) \
InterlockedPushEntrySList(_ListHead, _ListEntry)
#endif /* __USE_NTOSKRNL__ */
#define ExQueryDepthSList(ListHead) QueryDepthSList(ListHead)
static __inline__ PVOID
ExAllocateFromNPagedLookasideList( /*IN*/ PNPAGED_LOOKASIDE_LIST Lookaside )
{
PVOID Entry;
Lookaside->TotalAllocates++;
Entry = ExInterlockedPopEntrySList (&Lookaside->ListHead, &Lookaside->Obsoleted);
if (Entry == NULL)
{ Lookaside->_DDK_DUMMYUNION_MEMBER(AllocateMisses)++;
Entry = (Lookaside->Allocate)(Lookaside->Type, Lookaside->Size, Lookaside->Tag);
}
return Entry;
}
static __inline__ VOID
ExFreeToNPagedLookasideList(
/*IN*/ PNPAGED_LOOKASIDE_LIST Lookaside,
/*IN*/ PVOID Entry)
{
Lookaside->TotalFrees++;
if (ExQueryDepthSList(&Lookaside->ListHead) >= Lookaside->Depth)
{ Lookaside->_DDK_DUMMYUNION_N_MEMBER(2,FreeMisses)++;
(Lookaside->Free)(Entry);
}
else
{ ExInterlockedPushEntrySList(
&Lookaside->ListHead, (PSLIST_ENTRY)Entry, &Lookaside->Obsoleted
);
}
}
#if (__USE_NTOSKRNL__) && (_WIN32_WINNT >= _WIN32_WINNT_WINXP)
static __inline__ PVOID
ExAllocateFromPagedLookasideList(
/*IN*/ PPAGED_LOOKASIDE_LIST Lookaside)
{
PVOID Entry;
Lookaside->TotalAllocates++;
Entry = InterlockedPopEntrySList(&Lookaside->ListHead);
if (Entry == NULL)
{ Lookaside->_DDK_DUMMYUNION_MEMBER(AllocateMisses)++;
Entry = (Lookaside->Allocate)(Lookaside->Type, Lookaside->Size, Lookaside->Tag);
}
return Entry;
}
static __inline__ VOID
ExFreeToPagedLookasideList(
/*IN*/ PPAGED_LOOKASIDE_LIST Lookaside,
/*IN*/ PVOID Entry)
{
Lookaside->TotalFrees++;
if (ExQueryDepthSList(&Lookaside->ListHead) >= Lookaside->Depth)
{ Lookaside->_DDK_DUMMYUNION_N_MEMBER(2,FreeMisses)++;
(Lookaside->Free)(Entry);
}
else
{ InterlockedPushEntrySList(&Lookaside->ListHead, (PSLIST_ENTRY)Entry);
}
}
#else /* (__USE_NTOSKRNL__) && (_WIN32_WINNT >= _WIN32_WINNT_WINXP) */
NTOSAPI PVOID DDKAPI
ExAllocateFromPagedLookasideList( /*IN*/ PPAGED_LOOKASIDE_LIST Lookaside );
NTOSAPI VOID DDKAPI
ExFreeToPagedLookasideList(
/*IN*/ PPAGED_LOOKASIDE_LIST Lookaside,
/*IN*/ PVOID Entry
);
#endif /* (__USE_NTOSKRNL__) && (_WIN32_WINNT >= _WIN32_WINNT_WINXP) */
NTOSAPI PVOID DDKAPI
ExAllocatePoolWithQuotaTag(
/*IN*/ POOL_TYPE PoolType,
/*IN*/ SIZE_T NumberOfBytes,
/*IN*/ ULONG Tag
);
NTOSAPI PVOID DDKAPI
ExAllocatePoolWithTag(
/*IN*/ POOL_TYPE PoolType,
/*IN*/ SIZE_T NumberOfBytes,
/*IN*/ ULONG Tag
);
#ifdef POOL_TAGGING
#define ExAllocatePoolWithQuota(p,n) ExAllocatePoolWithQuotaTag(p,n,' kdD')
#define ExAllocatePool(p,n) ExAllocatePoolWithTag(p,n,' kdD')
#else /* !POOL_TAGGING */
NTOSAPI PVOID DDKAPI
ExAllocatePool( /*IN*/ POOL_TYPE PoolType, /*IN*/ SIZE_T NumberOfBytes );
NTOSAPI PVOID DDKAPI
ExAllocatePoolWithQuota( /*IN*/ POOL_TYPE PoolType, /*IN*/ SIZE_T NumberOfBytes );
#endif /* POOL_TAGGING */
NTOSAPI PVOID DDKAPI
ExAllocatePoolWithTagPriority(
/*IN*/ POOL_TYPE PoolType,
/*IN*/ SIZE_T NumberOfBytes,
/*IN*/ ULONG Tag,
/*IN*/ EX_POOL_PRIORITY Priority
);
NTOSAPI VOID DDKAPI
ExConvertExclusiveToSharedLite( /*IN*/ PERESOURCE Resource );
NTOSAPI NTSTATUS DDKAPI
ExCreateCallback(
/*OUT*/ PCALLBACK_OBJECT *CallbackObject,
/*IN*/ POBJECT_ATTRIBUTES ObjectAttributes,
/*IN*/ BOOLEAN Create,
/*IN*/ BOOLEAN AllowMultipleCallbacks
);
NTOSAPI VOID DDKAPI
ExDeleteNPagedLookasideList( /*IN*/ PNPAGED_LOOKASIDE_LIST Lookaside );
NTOSAPI VOID DDKAPI
ExDeletePagedLookasideList( /*IN*/ PPAGED_LOOKASIDE_LIST Lookaside );
NTOSAPI NTSTATUS DDKAPI
ExDeleteResourceLite( /*IN*/ PERESOURCE Resource );
NTOSAPI VOID DDKAPI
ExFreePool( /*IN*/ PVOID P );
#define PROTECTED_POOL 0x80000000
#ifdef POOL_TAGGING
#define ExFreePool(P) ExFreePoolWithTag(P, 0)
#endif
NTOSAPI VOID DDKAPI
ExFreePoolWithTag( /*IN*/ PVOID P, /*IN*/ ULONG Tag );
/* ERESOURCE_THREAD ExGetCurrentResourceThread( VOID );
*/
#define ExGetCurrentResourceThread() ((ERESOURCE_THREAD) PsGetCurrentThread())
NTOSAPI ULONG DDKAPI
ExGetExclusiveWaiterCount( /*IN*/ PERESOURCE Resource );
NTOSAPI KPROCESSOR_MODE DDKAPI
ExGetPreviousMode( VOID );
NTOSAPI ULONG DDKAPI
ExGetSharedWaiterCount( /*IN*/ PERESOURCE Resource );
NTOSAPI VOID DDKAPI
KeInitializeEvent(
/*IN*/ PRKEVENT Event,
/*IN*/ EVENT_TYPE Type,
/*IN*/ BOOLEAN State);
/* VOID DDKAPI ExInitializeFastMutex( IN PFAST_MUTEX FastMutex )
*/
#define ExInitializeFastMutex(_FastMutex) \
{ (_FastMutex)->Count = 1; \
(_FastMutex)->Owner = NULL; \
(_FastMutex)->Contention = 0; \
KeInitializeEvent(&(_FastMutex)->Event, SynchronizationEvent, FALSE); \
}
NTOSAPI VOID DDKAPI
ExInitializeNPagedLookasideList(
/*IN*/ PNPAGED_LOOKASIDE_LIST Lookaside,
/*IN*/ PALLOCATE_FUNCTION Allocate /*OPTIONAL*/,
/*IN*/ PFREE_FUNCTION Free /*OPTIONAL*/,
/*IN*/ ULONG Flags,
/*IN*/ SIZE_T Size,
/*IN*/ ULONG Tag,
/*IN*/ USHORT Depth
);
NTOSAPI VOID DDKAPI
ExInitializePagedLookasideList(
/*IN*/ PPAGED_LOOKASIDE_LIST Lookaside,
/*IN*/ PALLOCATE_FUNCTION Allocate /*OPTIONAL*/,
/*IN*/ PFREE_FUNCTION Free /*OPTIONAL*/,
/*IN*/ ULONG Flags,
/*IN*/ SIZE_T Size,
/*IN*/ ULONG Tag,
/*IN*/ USHORT Depth
);
NTOSAPI NTSTATUS DDKAPI
ExInitializeResourceLite( /*IN*/ PERESOURCE Resource );
/* VOID InitializeSListHead( IN PSLIST_HEADER SListHead )
*/
#define InitializeSListHead(_SListHead) \
(_SListHead)->Alignment = 0
#define ExInitializeSListHead InitializeSListHead
NTOSAPI LARGE_INTEGER DDKAPI
ExInterlockedAddLargeInteger(
/*IN*/ PLARGE_INTEGER Addend,
/*IN*/ LARGE_INTEGER Increment,
/*IN*/ PKSPIN_LOCK Lock
);
NTOSAPI VOID DDKFASTAPI
ExInterlockedAddLargeStatistic(
/*IN*/ PLARGE_INTEGER Addend,
/*IN*/ ULONG Increment
);
NTOSAPI ULONG DDKAPI
ExInterlockedAddUlong(
/*IN*/ PULONG Addend,
/*IN*/ ULONG Increment,
PKSPIN_LOCK Lock
);
NTOSAPI ULONG DDKFASTAPI
ExfInterlockedAddUlong(
/*IN*/ PULONG Addend,
/*IN*/ ULONG Increment,
PKSPIN_LOCK Lock
);
NTOSAPI LONGLONG DDKFASTAPI
ExInterlockedCompareExchange64(
/*IN OUT*/ PLONGLONG Destination,
/*IN*/ PLONGLONG Exchange,
/*IN*/ PLONGLONG Comparand,
/*IN*/ PKSPIN_LOCK Lock
);
NTOSAPI PSINGLE_LIST_ENTRY DDKFASTAPI
ExInterlockedFlushSList( /*IN*/ PSLIST_HEADER ListHead );
NTOSAPI PLIST_ENTRY DDKAPI
ExInterlockedInsertHeadList(
/*IN*/ PLIST_ENTRY ListHead,
/*IN*/ PLIST_ENTRY ListEntry,
/*IN*/ PKSPIN_LOCK Lock
);
NTOSAPI PLIST_ENTRY DDKFASTAPI
ExfInterlockedInsertHeadList(
/*IN*/ PLIST_ENTRY ListHead,
/*IN*/ PLIST_ENTRY ListEntry,
/*IN*/ PKSPIN_LOCK Lock
);
NTOSAPI PLIST_ENTRY DDKAPI
ExInterlockedInsertTailList(
/*IN*/ PLIST_ENTRY ListHead,
/*IN*/ PLIST_ENTRY ListEntry,
/*IN*/ PKSPIN_LOCK Lock
);
NTOSAPI PLIST_ENTRY DDKFASTAPI
ExfInterlockedInsertTailList(
/*IN*/ PLIST_ENTRY ListHead,
/*IN*/ PLIST_ENTRY ListEntry,
/*IN*/ PKSPIN_LOCK Lock
);
NTOSAPI PSINGLE_LIST_ENTRY DDKAPI
ExInterlockedPopEntryList(
/*IN*/ PSINGLE_LIST_ENTRY ListHead,
/*IN*/ PKSPIN_LOCK Lock
);
NTOSAPI PSINGLE_LIST_ENTRY DDKFASTAPI
ExfInterlockedPopEntryList(
/*IN*/ PSINGLE_LIST_ENTRY ListHead,
/*IN*/ PKSPIN_LOCK Lock
);
NTOSAPI PSINGLE_LIST_ENTRY DDKAPI
ExInterlockedPushEntryList(
/*IN*/ PSINGLE_LIST_ENTRY ListHead,
/*IN*/ PSINGLE_LIST_ENTRY ListEntry,
/*IN*/ PKSPIN_LOCK Lock
);
NTOSAPI PSINGLE_LIST_ENTRY DDKFASTAPI
ExfInterlockedPushEntryList(
/*IN*/ PSINGLE_LIST_ENTRY ListHead,
/*IN*/ PSINGLE_LIST_ENTRY ListEntry,
/*IN*/ PKSPIN_LOCK Lock
);
NTOSAPI PLIST_ENTRY DDKAPI
ExInterlockedRemoveHeadList(
/*IN*/ PLIST_ENTRY ListHead,
/*IN*/ PKSPIN_LOCK Lock
);
NTOSAPI PLIST_ENTRY DDKFASTAPI
ExfInterlockedRemoveHeadList(
/*IN*/ PLIST_ENTRY ListHead,
/*IN*/ PKSPIN_LOCK Lock
);
NTOSAPI BOOLEAN DDKAPI
ExIsProcessorFeaturePresent( /*IN*/ ULONG ProcessorFeature );
NTOSAPI BOOLEAN DDKAPI
ExIsResourceAcquiredExclusiveLite( /*IN*/ PERESOURCE Resource );
NTOSAPI USHORT DDKAPI
ExIsResourceAcquiredLite( /*IN*/ PERESOURCE Resource );
NTOSAPI USHORT DDKAPI
ExIsResourceAcquiredSharedLite( /*IN*/ PERESOURCE Resource );
NTOSAPI VOID DDKAPI
ExLocalTimeToSystemTime(
/*IN*/ PLARGE_INTEGER LocalTime,
/*OUT*/ PLARGE_INTEGER SystemTime
);
NTOSAPI VOID DDKAPI
ExNotifyCallback(
/*IN*/ PCALLBACK_OBJECT CallbackObject,
/*IN*/ PVOID Argument1,
/*IN*/ PVOID Argument2
);
NTOSAPI VOID DDKAPI
ExRaiseAccessViolation( VOID );
NTOSAPI VOID DDKAPI
ExRaiseDatatypeMisalignment( VOID );
NTOSAPI VOID DDKAPI
ExRaiseStatus( /*IN*/ NTSTATUS Status );
NTOSAPI PVOID DDKAPI
ExRegisterCallback(
/*IN*/ PCALLBACK_OBJECT CallbackObject,
/*IN*/ PCALLBACK_FUNCTION CallbackFunction,
/*IN*/ PVOID CallbackContext
);
NTOSAPI VOID DDKAPI
ExReinitializeResourceLite( /*IN*/ PERESOURCE Resource );
NTOSAPI VOID DDKFASTAPI
ExReleaseFastMutex( /*IN*/ PFAST_MUTEX FastMutex );
NTOSAPI VOID DDKFASTAPI
ExReleaseFastMutexUnsafe( /*IN*/ PFAST_MUTEX FastMutex );
NTOSAPI VOID DDKAPI
ExReleaseResourceForThreadLite(
/*IN*/ PERESOURCE Resource,
/*IN*/ ERESOURCE_THREAD ResourceThreadId
);
NTOSAPI VOID DDKFASTAPI
ExReleaseResourceLite( /*IN*/ PERESOURCE Resource );
NTOSAPI VOID DDKAPI
ExSetResourceOwnerPointer( /*IN*/ PERESOURCE Resource,
/*IN*/ PVOID OwnerPointer
);
NTOSAPI ULONG DDKAPI
ExSetTimerResolution( /*IN*/ ULONG DesiredTime, /*IN*/ BOOLEAN SetResolution );
NTOSAPI VOID DDKAPI
ExSystemTimeToLocalTime(
/*IN*/ PLARGE_INTEGER SystemTime,
/*OUT*/ PLARGE_INTEGER LocalTime
);
NTOSAPI BOOLEAN DDKFASTAPI
ExTryToAcquireFastMutex( /*IN*/ PFAST_MUTEX FastMutex );
NTOSAPI BOOLEAN DDKAPI
ExTryToAcquireResourceExclusiveLite( /*IN*/ PERESOURCE Resource );
NTOSAPI VOID DDKAPI
ExUnregisterCallback( /*IN*/ PVOID CbRegistration );
NTOSAPI NTSTATUS DDKAPI
ExUuidCreate( /*OUT*/ UUID *Uuid );
NTOSAPI BOOLEAN DDKAPI
ExVerifySuite( /*IN*/ SUITE_TYPE SuiteType );
#ifdef DBG
# define PAGED_CODE() \
{ if (KeGetCurrentIrql() > APC_LEVEL) \
{ KdPrint( ("NTDDK: Pageable code called at IRQL > APC_LEVEL (%d)\n", KeGetCurrentIrql() )); \
ASSERT(FALSE); \
} \
}
#else
# define PAGED_CODE()
#endif
NTOSAPI VOID DDKAPI
ProbeForRead(
/*IN*/ CONST VOID *Address,
/*IN*/ ULONG Length,
/*IN*/ ULONG Alignment
);
NTOSAPI VOID DDKAPI
ProbeForWrite(
/*IN*/ CONST VOID *Address,
/*IN*/ ULONG Length,
/*IN*/ ULONG Alignment
);
/** Configuration manager routines **/
NTOSAPI NTSTATUS DDKAPI
CmRegisterCallback(
/*IN*/ PEX_CALLBACK_FUNCTION Function,
/*IN*/ PVOID Context,
/*IN OUT*/ PLARGE_INTEGER Cookie
);
NTOSAPI NTSTATUS DDKAPI
CmUnRegisterCallback( /*IN*/ LARGE_INTEGER Cookie );
/** Filesystem runtime library routines **/
NTOSAPI BOOLEAN DDKAPI
FsRtlIsTotalDeviceFailure( /*IN*/ NTSTATUS Status );
/** Hardware abstraction layer routines **/
NTOSAPI VOID DDKFASTAPI
HalExamineMBR(
/*IN*/ PDEVICE_OBJECT DeviceObject,
/*IN*/ ULONG SectorSize,
/*IN*/ ULONG MBRTypeIdentifier,
/*OUT*/ PVOID Buffer
);
NTOSAPI VOID DDKAPI
READ_PORT_BUFFER_UCHAR(
/*IN*/ PUCHAR Port,
/*IN*/ PUCHAR Buffer,
/*IN*/ ULONG Count
);
NTOSAPI VOID DDKAPI
READ_PORT_BUFFER_ULONG(
/*IN*/ PULONG Port,
/*IN*/ PULONG Buffer,
/*IN*/ ULONG Count
);
NTOSAPI VOID DDKAPI
READ_PORT_BUFFER_USHORT(
/*IN*/ PUSHORT Port,
/*IN*/ PUSHORT Buffer,
/*IN*/ ULONG Count
);
NTOSAPI UCHAR DDKAPI
READ_PORT_UCHAR( /*IN*/ PUCHAR Port );
NTOSAPI ULONG DDKAPI
READ_PORT_ULONG( /*IN*/ PULONG Port );
NTOSAPI USHORT DDKAPI
READ_PORT_USHORT( /*IN*/ PUSHORT Port );
NTOSAPI VOID DDKAPI
READ_REGISTER_BUFFER_UCHAR(
/*IN*/ PUCHAR Register,
/*IN*/ PUCHAR Buffer,
/*IN*/ ULONG Count
);
NTOSAPI VOID DDKAPI
READ_REGISTER_BUFFER_ULONG(
/*IN*/ PULONG Register,
/*IN*/ PULONG Buffer,
/*IN*/ ULONG Count
);
NTOSAPI VOID DDKAPI
READ_REGISTER_BUFFER_USHORT(
/*IN*/ PUSHORT Register,
/*IN*/ PUSHORT Buffer,
/*IN*/ ULONG Count
);
NTOSAPI UCHAR DDKAPI
READ_REGISTER_UCHAR( /*IN*/ PUCHAR Register );
NTOSAPI ULONG DDKAPI
READ_REGISTER_ULONG( /*IN*/ PULONG Register );
NTOSAPI USHORT DDKAPI
READ_REGISTER_USHORT( /*IN*/ PUSHORT Register );
NTOSAPI VOID DDKAPI
WRITE_PORT_BUFFER_UCHAR(
/*IN*/ PUCHAR Port,
/*IN*/ PUCHAR Buffer,
/*IN*/ ULONG Count
);
NTOSAPI VOID DDKAPI
WRITE_PORT_BUFFER_ULONG(
/*IN*/ PULONG Port,
/*IN*/ PULONG Buffer,
/*IN*/ ULONG Count
);
NTOSAPI VOID DDKAPI
WRITE_PORT_BUFFER_USHORT(
/*IN*/ PUSHORT Port,
/*IN*/ PUSHORT Buffer,
/*IN*/ ULONG Count
);
NTOSAPI VOID DDKAPI
WRITE_PORT_UCHAR( /*IN*/ PUCHAR Port, /*IN*/ UCHAR Value );
NTOSAPI VOID DDKAPI
WRITE_PORT_ULONG( /*IN*/ PULONG Port, /*IN*/ ULONG Value );
NTOSAPI VOID DDKAPI
WRITE_PORT_USHORT( /*IN*/ PUSHORT Port, /*IN*/ USHORT Value );
NTOSAPI VOID DDKAPI
WRITE_REGISTER_BUFFER_UCHAR(
/*IN*/ PUCHAR Register,
/*IN*/ PUCHAR Buffer,
/*IN*/ ULONG Count
);
NTOSAPI VOID DDKAPI
WRITE_REGISTER_BUFFER_ULONG(
/*IN*/ PULONG Register,
/*IN*/ PULONG Buffer,
/*IN*/ ULONG Count
);
NTOSAPI VOID DDKAPI
WRITE_REGISTER_BUFFER_USHORT(
/*IN*/ PUSHORT Register,
/*IN*/ PUSHORT Buffer,
/*IN*/ ULONG Count
);
NTOSAPI VOID DDKAPI
WRITE_REGISTER_UCHAR( /*IN*/ PUCHAR Register, /*IN*/ UCHAR Value );
NTOSAPI VOID DDKAPI
WRITE_REGISTER_ULONG( /*IN*/ PULONG Register, /*IN*/ ULONG Value );
NTOSAPI VOID DDKAPI
WRITE_REGISTER_USHORT( /*IN*/ PUSHORT Register, /*IN*/ USHORT Value );
/** I/O manager routines **/
NTOSAPI VOID DDKAPI
IoAcquireCancelSpinLock( /*OUT*/ PKIRQL Irql );
NTOSAPI NTSTATUS DDKAPI
IoAcquireRemoveLockEx(
/*IN*/ PIO_REMOVE_LOCK RemoveLock,
/*IN*/ PVOID Tag /*OPTIONAL*/,
/*IN*/ PCSTR File,
/*IN*/ ULONG Line,
/*IN*/ ULONG RemlockSize
);
/* NTSTATUS IoAcquireRemoveLock(
* IN PIO_REMOVE_LOCK RemoveLock,
* IN PVOID Tag OPTIONAL
* )
*/
#define IoAcquireRemoveLock(_RemoveLock, _Tag) \
IoAcquireRemoveLockEx(_RemoveLock, _Tag, __FILE__, __LINE__, sizeof(IO_REMOVE_LOCK))
/* VOID IoAdjustPagingPathCount( IN PLONG Count, IN BOOLEAN Increment )
*/
#define IoAdjustPagingPathCount(_Count, _Increment) \
{ if (_Increment) \
{ InterlockedIncrement(_Count); \
} \
else \
{ InterlockedDecrement(_Count); \
} \
}
NTOSAPI VOID DDKAPI
IoAllocateController(
/*IN*/ PCONTROLLER_OBJECT ControllerObject,
/*IN*/ PDEVICE_OBJECT DeviceObject,
/*IN*/ PDRIVER_CONTROL ExecutionRoutine,
/*IN*/ PVOID Context
);
NTOSAPI NTSTATUS DDKAPI
IoAllocateDriverObjectExtension(
/*IN*/ PDRIVER_OBJECT DriverObject,
/*IN*/ PVOID ClientIdentificationAddress,
/*IN*/ ULONG DriverObjectExtensionSize,
/*OUT*/ PVOID *DriverObjectExtension
);
typedef
struct _IO_ERROR_LOG_PACKET
{ UCHAR MajorFunctionCode;
UCHAR RetryCount;
USHORT DumpDataSize;
USHORT NumberOfStrings;
USHORT StringOffset;
USHORT EventCategory;
NTSTATUS ErrorCode;
ULONG UniqueErrorValue;
NTSTATUS FinalStatus;
ULONG SequenceNumber;
ULONG IoControlCode;
LARGE_INTEGER DeviceOffset;
ULONG DumpData[1];
} IO_ERROR_LOG_PACKET, *PIO_ERROR_LOG_PACKET;
NTOSAPI PVOID DDKAPI
IoAllocateErrorLogEntry( /*IN*/ PVOID IoObject, /*IN*/ UCHAR EntrySize );
NTOSAPI PIRP DDKAPI
IoAllocateIrp( /*IN*/ CCHAR StackSize, /*IN*/ BOOLEAN ChargeQuota );
NTOSAPI PMDL DDKAPI
IoAllocateMdl(
/*IN*/ PVOID VirtualAddress,
/*IN*/ ULONG Length,
/*IN*/ BOOLEAN SecondaryBuffer,
/*IN*/ BOOLEAN ChargeQuota,
/*IN OUT*/ PIRP Irp /*OPTIONAL*/
);
NTOSAPI PIO_WORKITEM DDKAPI
IoAllocateWorkItem( /*IN*/ PDEVICE_OBJECT DeviceObject );
/* VOID IoAssignArcName(
* IN PUNICODE_STRING ArcName,
* IN PUNICODE_STRING DeviceName
* )
*/
#define IoAssignArcName(_ArcName, _DeviceName) \
(IoCreateSymbolicLink((_ArcName), (_DeviceName)))
NTOSAPI NTSTATUS DDKAPI
IoAttachDevice(
/*IN*/ PDEVICE_OBJECT SourceDevice,
/*IN*/ PUNICODE_STRING TargetDevice,
/*OUT*/ PDEVICE_OBJECT *AttachedDevice
);
NTOSAPI PDEVICE_OBJECT DDKAPI
IoAttachDeviceToDeviceStack(
/*IN*/ PDEVICE_OBJECT SourceDevice,
/*IN*/ PDEVICE_OBJECT TargetDevice
);
NTOSAPI PIRP DDKAPI
IoBuildAsynchronousFsdRequest(
/*IN*/ ULONG MajorFunction,
/*IN*/ PDEVICE_OBJECT DeviceObject,
/*IN OUT*/ PVOID Buffer /*OPTIONAL*/,
/*IN*/ ULONG Length /*OPTIONAL*/,
/*IN*/ PLARGE_INTEGER StartingOffset /*OPTIONAL*/,
/*IN*/ PIO_STATUS_BLOCK IoStatusBlock /*OPTIONAL*/
);
NTOSAPI PIRP DDKAPI
IoBuildDeviceIoControlRequest(
/*IN*/ ULONG IoControlCode,
/*IN*/ PDEVICE_OBJECT DeviceObject,
/*IN*/ PVOID InputBuffer /*OPTIONAL*/,
/*IN*/ ULONG InputBufferLength,
/*OUT*/ PVOID OutputBuffer /*OPTIONAL*/,
/*IN*/ ULONG OutputBufferLength,
/*IN*/ BOOLEAN InternalDeviceIoControl,
/*IN*/ PKEVENT Event,
/*OUT*/ PIO_STATUS_BLOCK IoStatusBlock
);
NTOSAPI VOID DDKAPI
IoBuildPartialMdl(
/*IN*/ PMDL SourceMdl,
/*IN OUT*/ PMDL TargetMdl,
/*IN*/ PVOID VirtualAddress,
/*IN*/ ULONG Length
);
NTOSAPI PIRP DDKAPI
IoBuildSynchronousFsdRequest(
/*IN*/ ULONG MajorFunction,
/*IN*/ PDEVICE_OBJECT DeviceObject,
/*IN OUT*/ PVOID Buffer /*OPTIONAL*/,
/*IN*/ ULONG Length /*OPTIONAL*/,
/*IN*/ PLARGE_INTEGER StartingOffset /*OPTIONAL*/,
/*IN*/ PKEVENT Event,
/*OUT*/ PIO_STATUS_BLOCK IoStatusBlock
);
NTOSAPI NTSTATUS DDKFASTAPI
IofCallDriver( /*IN*/ PDEVICE_OBJECT DeviceObject, /*IN OUT*/ PIRP Irp );
/* NTSTATUS IoCallDriver(
* IN PDEVICE_OBJECT DeviceObject,
* IN OUT PIRP Irp)
*/
#define IoCallDriver IofCallDriver
NTOSAPI VOID DDKAPI
IoCancelFileOpen(
/*IN*/ PDEVICE_OBJECT DeviceObject,
/*IN*/ PFILE_OBJECT FileObject
);
NTOSAPI BOOLEAN DDKAPI
IoCancelIrp( /*IN*/ PIRP Irp );
NTOSAPI NTSTATUS DDKAPI
IoCheckShareAccess(
/*IN*/ ACCESS_MASK DesiredAccess,
/*IN*/ ULONG DesiredShareAccess,
/*IN OUT*/ PFILE_OBJECT FileObject,
/*IN OUT*/ PSHARE_ACCESS ShareAccess,
/*IN*/ BOOLEAN Update
);
NTOSAPI VOID DDKFASTAPI
IofCompleteRequest( /*IN*/ PIRP Irp, /*IN*/ CCHAR PriorityBoost );
/* VOID IoCompleteRequest( IN PIRP Irp, IN CCHAR PriorityBoost )
*/
#define IoCompleteRequest IofCompleteRequest
NTOSAPI NTSTATUS DDKAPI
IoConnectInterrupt(
/*OUT*/ PKINTERRUPT *InterruptObject,
/*IN*/ PKSERVICE_ROUTINE ServiceRoutine,
/*IN*/ PVOID ServiceContext,
/*IN*/ PKSPIN_LOCK SpinLock /*OPTIONAL*/,
/*IN*/ ULONG Vector,
/*IN*/ KIRQL Irql,
/*IN*/ KIRQL SynchronizeIrql,
/*IN*/ KINTERRUPT_MODE InterruptMode,
/*IN*/ BOOLEAN ShareVector,
/*IN*/ KAFFINITY ProcessorEnableMask,
/*IN*/ BOOLEAN FloatingSave
);
/* PIO_STACK_LOCATION IoGetCurrentIrpStackLocation( IN PIRP Irp )
*/
#define IoGetCurrentIrpStackLocation(_Irp) \
((_Irp)->Tail.Overlay.CurrentStackLocation)
/* PIO_STACK_LOCATION IoGetNextIrpStackLocation( IN PIRP Irp )
*/
#define IoGetNextIrpStackLocation(_Irp) \
((_Irp)->Tail.Overlay.CurrentStackLocation - 1)
/* VOID IoCopyCurrentIrpStackLocationToNext( IN PIRP Irp )
*/
#define IoCopyCurrentIrpStackLocationToNext(_Irp) \
{ PIO_STACK_LOCATION _IrpSp; \
PIO_STACK_LOCATION _NextIrpSp; \
_IrpSp = IoGetCurrentIrpStackLocation(_Irp); \
_NextIrpSp = IoGetNextIrpStackLocation(_Irp); \
RtlCopyMemory(_NextIrpSp, _IrpSp, \
FIELD_OFFSET(IO_STACK_LOCATION, CompletionRoutine)); \
_NextIrpSp->Control = 0; \
}
NTOSAPI PCONTROLLER_OBJECT DDKAPI
IoCreateController( /*IN*/ ULONG Size );
NTOSAPI NTSTATUS DDKAPI
IoCreateDevice(
/*IN*/ PDRIVER_OBJECT DriverObject,
/*IN*/ ULONG DeviceExtensionSize,
/*IN*/ PUNICODE_STRING DeviceName /*OPTIONAL*/,
/*IN*/ DEVICE_TYPE DeviceType,
/*IN*/ ULONG DeviceCharacteristics,
/*IN*/ BOOLEAN Exclusive,
/*OUT*/ PDEVICE_OBJECT *DeviceObject
);
NTOSAPI NTSTATUS DDKAPI
IoCreateDisk( /*IN*/ PDEVICE_OBJECT DeviceObject, /*IN*/ PCREATE_DISK Disk );
NTOSAPI NTSTATUS DDKAPI
IoCreateFile(
/*OUT*/ PHANDLE FileHandle,
/*IN*/ ACCESS_MASK DesiredAccess,
/*IN*/ POBJECT_ATTRIBUTES ObjectAttributes,
/*OUT*/ PIO_STATUS_BLOCK IoStatusBlock,
/*IN*/ PLARGE_INTEGER AllocationSize /*OPTIONAL*/,
/*IN*/ ULONG FileAttributes,
/*IN*/ ULONG ShareAccess,
/*IN*/ ULONG Disposition,
/*IN*/ ULONG CreateOptions,
/*IN*/ PVOID EaBuffer /*OPTIONAL*/,
/*IN*/ ULONG EaLength,
/*IN*/ CREATE_FILE_TYPE CreateFileType,
/*IN*/ PVOID ExtraCreateParameters /*OPTIONAL*/,
/*IN*/ ULONG Options
);
NTOSAPI PKEVENT DDKAPI
IoCreateNotificationEvent(
/*IN*/ PUNICODE_STRING EventName,
/*OUT*/ PHANDLE EventHandle
);
NTOSAPI NTSTATUS DDKAPI
IoCreateSymbolicLink(
/*IN*/ PUNICODE_STRING SymbolicLinkName,
/*IN*/ PUNICODE_STRING DeviceName
);
NTOSAPI PKEVENT DDKAPI
IoCreateSynchronizationEvent(
/*IN*/ PUNICODE_STRING EventName,
/*OUT*/ PHANDLE EventHandle
);
NTOSAPI NTSTATUS DDKAPI
IoCreateUnprotectedSymbolicLink(
/*IN*/ PUNICODE_STRING SymbolicLinkName,
/*IN*/ PUNICODE_STRING DeviceName
);
NTOSAPI VOID DDKAPI
IoCsqInitialize(
PIO_CSQ Csq,
/*IN*/ PIO_CSQ_INSERT_IRP CsqInsertIrp,
/*IN*/ PIO_CSQ_REMOVE_IRP CsqRemoveIrp,
/*IN*/ PIO_CSQ_PEEK_NEXT_IRP CsqPeekNextIrp,
/*IN*/ PIO_CSQ_ACQUIRE_LOCK CsqAcquireLock,
/*IN*/ PIO_CSQ_RELEASE_LOCK CsqReleaseLock,
/*IN*/ PIO_CSQ_COMPLETE_CANCELED_IRP CsqCompleteCanceledIrp
);
NTOSAPI VOID DDKAPI
IoCsqInsertIrp(
/*IN*/ PIO_CSQ Csq,
/*IN*/ PIRP Irp,
/*IN*/ PIO_CSQ_IRP_CONTEXT Context
);
NTOSAPI PIRP DDKAPI
IoCsqRemoveIrp( /*IN*/ PIO_CSQ Csq, /*IN*/ PIO_CSQ_IRP_CONTEXT Context );
NTOSAPI PIRP DDKAPI
IoCsqRemoveNextIrp( /*IN*/ PIO_CSQ Csq, /*IN*/ PVOID PeekContext );
NTOSAPI VOID DDKAPI
IoDeleteController( /*IN*/ PCONTROLLER_OBJECT ControllerObject );
NTOSAPI VOID DDKAPI
IoDeleteDevice( /*IN*/ PDEVICE_OBJECT DeviceObject );
NTOSAPI NTSTATUS DDKAPI
IoDeleteSymbolicLink( /*IN*/ PUNICODE_STRING SymbolicLinkName );
/* VOID IoDeassignArcName( IN PUNICODE_STRING ArcName )
*/
#define IoDeassignArcName IoDeleteSymbolicLink
NTOSAPI VOID DDKAPI
IoDetachDevice( /*IN OUT*/ PDEVICE_OBJECT TargetDevice );
NTOSAPI VOID DDKAPI
IoDisconnectInterrupt( /*IN*/ PKINTERRUPT InterruptObject );
NTOSAPI BOOLEAN DDKAPI
IoForwardIrpSynchronously( /*IN*/ PDEVICE_OBJECT DeviceObject, /*IN*/ PIRP Irp );
#define IoForwardAndCatchIrp IoForwardIrpSynchronously
NTOSAPI VOID DDKAPI
IoFreeController( /*IN*/ PCONTROLLER_OBJECT ControllerObject );
NTOSAPI VOID DDKAPI
IoFreeErrorLogEntry( PVOID ElEntry );
NTOSAPI VOID DDKAPI
IoFreeIrp( /*IN*/ PIRP Irp );
NTOSAPI VOID DDKAPI
IoFreeMdl( /*IN*/ PMDL Mdl );
NTOSAPI VOID DDKAPI
IoFreeWorkItem( /*IN*/ PIO_WORKITEM pIOWorkItem );
NTOSAPI PDEVICE_OBJECT DDKAPI
IoGetAttachedDevice( /*IN*/ PDEVICE_OBJECT DeviceObject );
NTOSAPI PDEVICE_OBJECT DDKAPI
IoGetAttachedDeviceReference( /*IN*/ PDEVICE_OBJECT DeviceObject );
NTOSAPI NTSTATUS DDKAPI
IoGetBootDiskInformation(
/*IN OUT*/ PBOOTDISK_INFORMATION BootDiskInformation,
/*IN*/ ULONG Size
);
NTOSAPI PCONFIGURATION_INFORMATION DDKAPI
IoGetConfigurationInformation( VOID );
NTOSAPI PEPROCESS DDKAPI
IoGetCurrentProcess( VOID );
NTOSAPI NTSTATUS DDKAPI
IoGetDeviceInterfaceAlias(
/*IN*/ PUNICODE_STRING SymbolicLinkName,
/*IN*/ CONST GUID *AliasInterfaceClassGuid,
/*OUT*/ PUNICODE_STRING AliasSymbolicLinkName
);
NTOSAPI NTSTATUS DDKAPI
IoGetDeviceInterfaces(
/*IN*/ CONST GUID *InterfaceClassGuid,
/*IN*/ PDEVICE_OBJECT PhysicalDeviceObject /*OPTIONAL*/,
/*IN*/ ULONG Flags,
/*OUT*/ PWSTR *SymbolicLinkList
);
NTOSAPI NTSTATUS DDKAPI
IoGetDeviceObjectPointer(
/*IN*/ PUNICODE_STRING ObjectName,
/*IN*/ ACCESS_MASK DesiredAccess,
/*OUT*/ PFILE_OBJECT *FileObject,
/*OUT*/ PDEVICE_OBJECT *DeviceObject
);
NTOSAPI NTSTATUS DDKAPI
IoGetDeviceProperty(
/*IN*/ PDEVICE_OBJECT DeviceObject,
/*IN*/ DEVICE_REGISTRY_PROPERTY DeviceProperty,
/*IN*/ ULONG BufferLength,
/*OUT*/ PVOID PropertyBuffer,
/*OUT*/ PULONG ResultLength
);
NTOSAPI PDEVICE_OBJECT DDKAPI
IoGetDeviceToVerify( /*IN*/ PETHREAD Thread );
NTOSAPI PDMA_ADAPTER DDKAPI
IoGetDmaAdapter(
/*IN*/ PDEVICE_OBJECT PhysicalDeviceObject,
/*IN*/ PDEVICE_DESCRIPTION DeviceDescription,
/*IN OUT*/ PULONG NumberOfMapRegisters
);
NTOSAPI PVOID DDKAPI
IoGetDriverObjectExtension(
/*IN*/ PDRIVER_OBJECT DriverObject,
/*IN*/ PVOID ClientIdentificationAddress
);
NTOSAPI PGENERIC_MAPPING DDKAPI
IoGetFileObjectGenericMapping( VOID );
/* ULONG IoGetFunctionCodeFromCtlCode( IN ULONG ControlCode )
*/
#define IoGetFunctionCodeFromCtlCode(_ControlCode) \
(((_ControlCode) >> 2) & 0x00000FFF)
NTOSAPI PVOID DDKAPI
IoGetInitialStack( VOID );
NTOSAPI PDEVICE_OBJECT DDKAPI
IoGetRelatedDeviceObject( /*IN*/ PFILE_OBJECT FileObject );
NTOSAPI ULONG DDKAPI
IoGetRemainingStackSize( VOID );
NTOSAPI VOID DDKAPI
IoGetStackLimits( /*OUT*/ PULONG_PTR LowLimit, /*OUT*/ PULONG_PTR HighLimit );
NTOSAPI VOID DDKAPI
KeInitializeDpc(
/*IN*/ PRKDPC Dpc,
/*IN*/ PKDEFERRED_ROUTINE DeferredRoutine,
/*IN*/ PVOID DeferredContext
);
/* VOID IoInitializeDpcRequest(
* IN PDEVICE_OBJECT DeviceObject,
* IN PIO_DPC_ROUTINE DpcRoutine
* )
*/
#define IoInitializeDpcRequest(_DeviceObject, _DpcRoutine) \
KeInitializeDpc(&(_DeviceObject)->Dpc, \
(PKDEFERRED_ROUTINE) (_DpcRoutine), _DeviceObject \
)
NTOSAPI VOID DDKAPI
IoInitializeIrp(
/*IN OUT*/ PIRP Irp,
/*IN*/ USHORT PacketSize,
/*IN*/ CCHAR StackSize
);
NTOSAPI VOID DDKAPI
IoInitializeRemoveLockEx(
/*IN*/ PIO_REMOVE_LOCK Lock,
/*IN*/ ULONG AllocateTag,
/*IN*/ ULONG MaxLockedMinutes,
/*IN*/ ULONG HighWatermark,
/*IN*/ ULONG RemlockSize
);
/* VOID IoInitializeRemoveLock(
* IN PIO_REMOVE_LOCK Lock,
* IN ULONG AllocateTag,
* IN ULONG MaxLockedMinutes,
* IN ULONG HighWatermark
* )
*/
#define IoInitializeRemoveLock(Lock, AllocateTag, MaxLockedMinutes, HighWatermark) \
IoInitializeRemoveLockEx(Lock, AllocateTag, MaxLockedMinutes, \
HighWatermark, sizeof(IO_REMOVE_LOCK) \
)
NTOSAPI NTSTATUS DDKAPI
IoInitializeTimer(
/*IN*/ PDEVICE_OBJECT DeviceObject,
/*IN*/ PIO_TIMER_ROUTINE TimerRoutine,
/*IN*/ PVOID Context
);
NTOSAPI VOID DDKAPI
IoInvalidateDeviceRelations(
/*IN*/ PDEVICE_OBJECT DeviceObject,
/*IN*/ DEVICE_RELATION_TYPE Type
);
NTOSAPI VOID DDKAPI
IoInvalidateDeviceState( /*IN*/ PDEVICE_OBJECT PhysicalDeviceObject );
NTOSAPI BOOLEAN DDKAPI
IoIs32bitProcess( /*IN*/ PIRP Irp /*OPTIONAL*/ );
/* BOOLEAN IoIsErrorUserInduced( IN NTSTATUS Status )
*/
#define IoIsErrorUserInduced( Status ) \
((BOOLEAN)(((Status) == STATUS_DEVICE_NOT_READY) \
|| ((Status) == STATUS_IO_TIMEOUT) \
|| ((Status) == STATUS_MEDIA_WRITE_PROTECTED) \
|| ((Status) == STATUS_NO_MEDIA_IN_DEVICE) \
|| ((Status) == STATUS_VERIFY_REQUIRED) \
|| ((Status) == STATUS_UNRECOGNIZED_MEDIA) \
|| ((Status) == STATUS_WRONG_VOLUME)))
NTOSAPI BOOLEAN DDKAPI
IoIsWdmVersionAvailable( /*IN*/ UCHAR MajorVersion, /*IN*/ UCHAR MinorVersion );
NTOSAPI PIRP DDKAPI
IoMakeAssociatedIrp( /*IN*/ PIRP Irp, /*IN*/ CCHAR StackSize );
/* VOID IoMarkIrpPending( IN OUT PIRP Irp )
*/
#define IoMarkIrpPending(_Irp) \
(IoGetCurrentIrpStackLocation(_Irp)->Control |= SL_PENDING_RETURNED)
NTOSAPI NTSTATUS DDKAPI
IoOpenDeviceInterfaceRegistryKey(
/*IN*/ PUNICODE_STRING SymbolicLinkName,
/*IN*/ ACCESS_MASK DesiredAccess,
/*OUT*/ PHANDLE DeviceInterfaceKey
);
NTOSAPI NTSTATUS DDKAPI
IoOpenDeviceRegistryKey(
/*IN*/ PDEVICE_OBJECT DeviceObject,
/*IN*/ ULONG DevInstKeyType,
/*IN*/ ACCESS_MASK DesiredAccess,
/*OUT*/ PHANDLE DevInstRegKey
);
NTOSAPI NTSTATUS DDKAPI
IoQueryDeviceDescription(
/*IN*/ PINTERFACE_TYPE BusType /*OPTIONAL*/,
/*IN*/ PULONG BusNumber /*OPTIONAL*/,
/*IN*/ PCONFIGURATION_TYPE ControllerType /*OPTIONAL*/,
/*IN*/ PULONG ControllerNumber /*OPTIONAL*/,
/*IN*/ PCONFIGURATION_TYPE PeripheralType /*OPTIONAL*/,
/*IN*/ PULONG PeripheralNumber /*OPTIONAL*/,
/*IN*/ PIO_QUERY_DEVICE_ROUTINE CalloutRoutine,
/*IN*/ PVOID Context
);
NTOSAPI VOID DDKAPI
IoQueueWorkItem(
/*IN*/ PIO_WORKITEM pIOWorkItem,
/*IN*/ PIO_WORKITEM_ROUTINE Routine,
/*IN*/ WORK_QUEUE_TYPE QueueType,
/*IN*/ PVOID Context
);
NTOSAPI VOID DDKAPI
IoRaiseHardError(
/*IN*/ PIRP Irp,
/*IN*/ PVPB Vpb /*OPTIONAL*/,
/*IN*/ PDEVICE_OBJECT RealDeviceObject
);
NTOSAPI BOOLEAN DDKAPI
IoRaiseInformationalHardError(
/*IN*/ NTSTATUS ErrorStatus,
/*IN*/ PUNICODE_STRING String /*OPTIONAL*/,
/*IN*/ PKTHREAD Thread /*OPTIONAL*/
);
NTOSAPI NTSTATUS DDKAPI
IoReadDiskSignature(
/*IN*/ PDEVICE_OBJECT DeviceObject,
/*IN*/ ULONG BytesPerSector,
/*OUT*/ PDISK_SIGNATURE Signature
);
NTOSAPI NTSTATUS DDKAPI
IoReadPartitionTableEx(
/*IN*/ PDEVICE_OBJECT DeviceObject,
/*IN*/ struct _DRIVE_LAYOUT_INFORMATION_EX **PartitionBuffer
);
NTOSAPI VOID DDKAPI
IoRegisterBootDriverReinitialization(
/*IN*/ PDRIVER_OBJECT DriverObject,
/*IN*/ PDRIVER_REINITIALIZE DriverReinitializationRoutine,
/*IN*/ PVOID Context
);
NTOSAPI VOID DDKAPI
IoRegisterBootDriverReinitialization(
/*IN*/ PDRIVER_OBJECT DriverObject,
/*IN*/ PDRIVER_REINITIALIZE DriverReinitializationRoutine,
/*IN*/ PVOID Context
);
NTOSAPI NTSTATUS DDKAPI
IoRegisterDeviceInterface(
/*IN*/ PDEVICE_OBJECT PhysicalDeviceObject,
/*IN*/ CONST GUID *InterfaceClassGuid,
/*IN*/ PUNICODE_STRING ReferenceString /*OPTIONAL*/,
/*OUT*/ PUNICODE_STRING SymbolicLinkName
);
NTOSAPI VOID DDKAPI
IoRegisterDriverReinitialization(
/*IN*/ PDRIVER_OBJECT DriverObject,
/*IN*/ PDRIVER_REINITIALIZE DriverReinitializationRoutine,
/*IN*/ PVOID Context
);
NTOSAPI NTSTATUS DDKAPI
IoRegisterPlugPlayNotification(
/*IN*/ IO_NOTIFICATION_EVENT_CATEGORY EventCategory,
/*IN*/ ULONG EventCategoryFlags,
/*IN*/ PVOID EventCategoryData /*OPTIONAL*/,
/*IN*/ PDRIVER_OBJECT DriverObject,
/*IN*/ PDRIVER_NOTIFICATION_CALLBACK_ROUTINE CallbackRoutine,
/*IN*/ PVOID Context,
/*OUT*/ PVOID *NotificationEntry
);
NTOSAPI NTSTATUS DDKAPI
IoRegisterShutdownNotification( /*IN*/ PDEVICE_OBJECT DeviceObject );
NTOSAPI VOID DDKAPI
IoReleaseCancelSpinLock( /*IN*/ KIRQL Irql );
NTOSAPI VOID DDKAPI
IoReleaseRemoveLockAndWaitEx(
/*IN*/ PIO_REMOVE_LOCK RemoveLock,
/*IN*/ PVOID Tag,
/*IN*/ ULONG RemlockSize
);
/* VOID IoReleaseRemoveLockAndWait(
* IN PIO_REMOVE_LOCK RemoveLock,
* IN PVOID Tag
* )
*/
#define IoReleaseRemoveLockAndWait(_RemoveLock, _Tag) \
IoReleaseRemoveLockAndWaitEx(_RemoveLock, _Tag, sizeof(IO_REMOVE_LOCK))
NTOSAPI VOID DDKAPI
IoReleaseRemoveLockEx(
/*IN*/ PIO_REMOVE_LOCK RemoveLock,
/*IN*/ PVOID Tag,
/*IN*/ ULONG RemlockSize
);
/* VOID IoReleaseRemoveLock(
* IN PIO_REMOVE_LOCK RemoveLock,
* IN PVOID Tag
* )
*/
#define IoReleaseRemoveLock(_RemoveLock, _Tag) \
IoReleaseRemoveLockEx(_RemoveLock, _Tag, sizeof(IO_REMOVE_LOCK))
NTOSAPI VOID DDKAPI
IoRemoveShareAccess(
/*IN*/ PFILE_OBJECT FileObject,
/*IN OUT*/ PSHARE_ACCESS ShareAccess
);
NTOSAPI NTSTATUS DDKAPI
IoReportDetectedDevice(
/*IN*/ PDRIVER_OBJECT DriverObject,
/*IN*/ INTERFACE_TYPE LegacyBusType,
/*IN*/ ULONG BusNumber,
/*IN*/ ULONG SlotNumber,
/*IN*/ PCM_RESOURCE_LIST ResourceList,
/*IN*/ PIO_RESOURCE_REQUIREMENTS_LIST ResourceRequirements /*OPTIONAL*/,
/*IN*/ BOOLEAN ResourceAssigned,
/*IN OUT*/ PDEVICE_OBJECT *DeviceObject
);
NTOSAPI NTSTATUS DDKAPI
IoReportResourceForDetection(
/*IN*/ PDRIVER_OBJECT DriverObject,
/*IN*/ PCM_RESOURCE_LIST DriverList /*OPTIONAL*/,
/*IN*/ ULONG DriverListSize /*OPTIONAL*/,
/*IN*/ PDEVICE_OBJECT DeviceObject /*OPTIONAL*/,
/*IN*/ PCM_RESOURCE_LIST DeviceList /*OPTIONAL*/,
/*IN*/ ULONG DeviceListSize /*OPTIONAL*/,
/*OUT*/ PBOOLEAN ConflictDetected
);
NTOSAPI NTSTATUS DDKAPI
IoReportResourceUsage(
/*IN*/ PUNICODE_STRING DriverClassName /*OPTIONAL*/,
/*IN*/ PDRIVER_OBJECT DriverObject,
/*IN*/ PCM_RESOURCE_LIST DriverList /*OPTIONAL*/,
/*IN*/ ULONG DriverListSize /*OPTIONAL*/,
/*IN*/ PDEVICE_OBJECT DeviceObject,
/*IN*/ PCM_RESOURCE_LIST DeviceList /*OPTIONAL*/,
/*IN*/ ULONG DeviceListSize /*OPTIONAL*/,
/*IN*/ BOOLEAN OverrideConflict,
/*OUT*/ PBOOLEAN ConflictDetected
);
NTOSAPI NTSTATUS DDKAPI
IoReportTargetDeviceChange(
/*IN*/ PDEVICE_OBJECT PhysicalDeviceObject,
/*IN*/ PVOID NotificationStructure
);
NTOSAPI NTSTATUS DDKAPI
IoReportTargetDeviceChangeAsynchronous(
/*IN*/ PDEVICE_OBJECT PhysicalDeviceObject,
/*IN*/ PVOID NotificationStructure,
/*IN*/ PDEVICE_CHANGE_COMPLETE_CALLBACK Callback /*OPTIONAL*/,
/*IN*/ PVOID Context /*OPTIONAL*/
);
NTOSAPI VOID DDKAPI
IoRequestDeviceEject( /*IN*/ PDEVICE_OBJECT PhysicalDeviceObject );
/* VOID IoRequestDpc(
* IN PDEVICE_OBJECT DeviceObject,
* IN PIRP Irp,
* IN PVOID Context
* )
*/
#define IoRequestDpc(DeviceObject, Irp, Context) \
(KeInsertQueueDpc(&(DeviceObject)->Dpc, (Irp), (Context)))
NTOSAPI VOID DDKAPI
IoReuseIrp( /*IN OUT*/ PIRP Irp, /*IN*/ NTSTATUS Status );
/* PDRIVER_CANCEL IoSetCancelRoutine(
* IN PIRP Irp,
* IN PDRIVER_CANCEL CancelRoutine
* )
*/
#define IoSetCancelRoutine(_Irp, _CancelRoutine) \
((PDRIVER_CANCEL)(InterlockedExchangePointer( \
(PVOID *)(&(_Irp)->CancelRoutine), (PVOID)(_CancelRoutine)) \
))
/* VOID IoSetCompletionRoutine(
* IN PIRP Irp,
* IN PIO_COMPLETION_ROUTINE CompletionRoutine,
* IN PVOID Context,
* IN BOOLEAN InvokeOnSuccess,
* IN BOOLEAN InvokeOnError,
* IN BOOLEAN InvokeOnCancel
* )
*/
#define IoSetCompletionRoutine(_Irp, _CompletionRoutine, _Context, \
_InvokeOnSuccess, _InvokeOnError, _InvokeOnCancel \
) \
{ PIO_STACK_LOCATION _IrpSp; \
ASSERT(_InvokeOnSuccess || _InvokeOnError || _InvokeOnCancel ? \
_CompletionRoutine != NULL : TRUE); \
_IrpSp = IoGetNextIrpStackLocation(_Irp); \
_IrpSp->CompletionRoutine = (PIO_COMPLETION_ROUTINE)(_CompletionRoutine); \
_IrpSp->Context = (_Context); \
_IrpSp->Control = 0; \
if (_InvokeOnSuccess) _IrpSp->Control = SL_INVOKE_ON_SUCCESS; \
if (_InvokeOnError) _IrpSp->Control |= SL_INVOKE_ON_ERROR; \
if (_InvokeOnCancel) _IrpSp->Control |= SL_INVOKE_ON_CANCEL; \
}
NTOSAPI VOID DDKAPI
IoSetCompletionRoutineEx(
/*IN*/ PDEVICE_OBJECT DeviceObject,
/*IN*/ PIRP Irp,
/*IN*/ PIO_COMPLETION_ROUTINE CompletionRoutine,
/*IN*/ PVOID Context,
/*IN*/ BOOLEAN InvokeOnSuccess,
/*IN*/ BOOLEAN InvokeOnError,
/*IN*/ BOOLEAN InvokeOnCancel
);
NTOSAPI NTSTATUS DDKAPI
IoSetDeviceInterfaceState(
/*IN*/ PUNICODE_STRING SymbolicLinkName,
/*IN*/ BOOLEAN Enable
);
NTOSAPI VOID DDKAPI
IoSetHardErrorOrVerifyDevice(
/*IN*/ PIRP Irp,
/*IN*/ PDEVICE_OBJECT DeviceObject
);
/* VOID IoSetNextIrpStackLocation( IN OUT PIRP Irp )
*/
#define IoSetNextIrpStackLocation(_Irp) \
{ (_Irp)->CurrentLocation--; \
(_Irp)->Tail.Overlay.CurrentStackLocation--; \
}
NTOSAPI NTSTATUS DDKAPI
IoSetPartitionInformationEx(
/*IN*/ PDEVICE_OBJECT DeviceObject,
/*IN*/ ULONG PartitionNumber,
/*IN*/ struct _SET_PARTITION_INFORMATION_EX *PartitionInfo
);
NTOSAPI VOID DDKAPI
IoSetShareAccess(
/*IN*/ ACCESS_MASK DesiredAccess,
/*IN*/ ULONG DesiredShareAccess,
/*IN OUT*/ PFILE_OBJECT FileObject,
/*OUT*/ PSHARE_ACCESS ShareAccess
);
NTOSAPI VOID DDKAPI
IoSetStartIoAttributes(
/*IN*/ PDEVICE_OBJECT DeviceObject,
/*IN*/ BOOLEAN DeferredStartIo,
/*IN*/ BOOLEAN NonCancelable
);
NTOSAPI NTSTATUS DDKAPI
IoSetSystemPartition( /*IN*/ PUNICODE_STRING VolumeNameString );
NTOSAPI BOOLEAN DDKAPI
IoSetThreadHardErrorMode( /*IN*/ BOOLEAN EnableHardErrors );
/* USHORT IoSizeOfIrp( IN CCHAR StackSize )
*/
#define IoSizeOfIrp(_StackSize) \
((USHORT) (sizeof(IRP) + ((_StackSize) * (sizeof(IO_STACK_LOCATION)))))
/* VOID IoSkipCurrentIrpStackLocation( IN PIRP Irp )
*/
#define IoSkipCurrentIrpStackLocation(_Irp) \
{ (_Irp)->CurrentLocation++; \
(_Irp)->Tail.Overlay.CurrentStackLocation++; \
}
NTOSAPI VOID DDKAPI
IoStartNextPacket(
/*IN*/ PDEVICE_OBJECT DeviceObject,
/*IN*/ BOOLEAN Cancelable
);
NTOSAPI VOID DDKAPI
IoStartNextPacketByKey(
/*IN*/ PDEVICE_OBJECT DeviceObject,
/*IN*/ BOOLEAN Cancelable,
/*IN*/ ULONG Key
);
NTOSAPI VOID DDKAPI
IoStartPacket(
/*IN*/ PDEVICE_OBJECT DeviceObject,
/*IN*/ PIRP Irp,
/*IN*/ PULONG Key /*OPTIONAL*/,
/*IN*/ PDRIVER_CANCEL CancelFunction /*OPTIONAL*/
);
NTOSAPI VOID DDKAPI
IoStartTimer( /*IN*/ PDEVICE_OBJECT DeviceObject );
NTOSAPI VOID DDKAPI
IoStopTimer( /*IN*/ PDEVICE_OBJECT DeviceObject );
NTOSAPI NTSTATUS DDKAPI
IoUnregisterPlugPlayNotification( /*IN*/ PVOID NotificationEntry );
NTOSAPI VOID DDKAPI
IoUnregisterShutdownNotification( /*IN*/ PDEVICE_OBJECT DeviceObject );
NTOSAPI VOID DDKAPI
IoUpdateShareAccess(
/*IN*/ PFILE_OBJECT FileObject,
/*IN OUT*/ PSHARE_ACCESS ShareAccess
);
NTOSAPI NTSTATUS DDKAPI
IoVerifyPartitionTable(
/*IN*/ PDEVICE_OBJECT DeviceObject,
/*IN*/ BOOLEAN FixErrors
);
NTOSAPI NTSTATUS DDKAPI
IoVolumeDeviceToDosName(
/*IN*/ PVOID VolumeDeviceObject,
/*OUT*/ PUNICODE_STRING DosName
);
NTOSAPI NTSTATUS DDKAPI
IoWMIAllocateInstanceIds(
/*IN*/ GUID *Guid,
/*IN*/ ULONG InstanceCount,
/*OUT*/ ULONG *FirstInstanceId
);
NTOSAPI ULONG DDKAPI
IoWMIDeviceObjectToProviderId( /*IN*/ PDEVICE_OBJECT DeviceObject );
NTOSAPI NTSTATUS DDKAPI
IoWMIDeviceObjectToInstanceName(
/*IN*/ PVOID DataBlockObject,
/*IN*/ PDEVICE_OBJECT DeviceObject,
/*OUT*/ PUNICODE_STRING InstanceName
);
NTOSAPI NTSTATUS DDKAPI
IoWMIExecuteMethod(
/*IN*/ PVOID DataBlockObject,
/*IN*/ PUNICODE_STRING InstanceName,
/*IN*/ ULONG MethodId,
/*IN*/ ULONG InBufferSize,
/*IN OUT*/ PULONG OutBufferSize,
/*IN OUT*/ PUCHAR InOutBuffer
);
NTOSAPI NTSTATUS DDKAPI
IoWMIHandleToInstanceName(
/*IN*/ PVOID DataBlockObject,
/*IN*/ HANDLE FileHandle,
/*OUT*/ PUNICODE_STRING InstanceName
);
NTOSAPI NTSTATUS DDKAPI
IoWMIOpenBlock(
/*IN*/ GUID *DataBlockGuid,
/*IN*/ ULONG DesiredAccess,
/*OUT*/ PVOID *DataBlockObject
);
NTOSAPI NTSTATUS DDKAPI
IoWMIQueryAllData(
/*IN*/ PVOID DataBlockObject,
/*IN OUT*/ ULONG *InOutBufferSize,
/*OUT*/ PVOID OutBuffer
);
NTOSAPI NTSTATUS DDKAPI
IoWMIQueryAllDataMultiple(
/*IN*/ PVOID *DataBlockObjectList,
/*IN*/ ULONG ObjectCount,
/*IN OUT*/ ULONG *InOutBufferSize,
/*OUT*/ PVOID OutBuffer
);
NTOSAPI NTSTATUS DDKAPI
IoWMIQuerySingleInstance(
/*IN*/ PVOID DataBlockObject,
/*IN*/ PUNICODE_STRING InstanceName,
/*IN OUT*/ ULONG *InOutBufferSize,
/*OUT*/ PVOID OutBuffer
);
NTOSAPI NTSTATUS DDKAPI
IoWMIQuerySingleInstanceMultiple(
/*IN*/ PVOID *DataBlockObjectList,
/*IN*/ PUNICODE_STRING InstanceNames,
/*IN*/ ULONG ObjectCount,
/*IN OUT*/ ULONG *InOutBufferSize,
/*OUT*/ PVOID OutBuffer
);
NTOSAPI NTSTATUS DDKAPI
IoWMIRegistrationControl(
/*IN*/ PDEVICE_OBJECT DeviceObject,
/*IN*/ ULONG Action
);
NTOSAPI NTSTATUS DDKAPI
IoWMISetNotificationCallback(
/*IN*/ PVOID Object,
/*IN*/ WMI_NOTIFICATION_CALLBACK Callback,
/*IN*/ PVOID Context
);
NTOSAPI NTSTATUS DDKAPI
IoWMISetSingleInstance(
/*IN*/ PVOID DataBlockObject,
/*IN*/ PUNICODE_STRING InstanceName,
/*IN*/ ULONG Version,
/*IN*/ ULONG ValueBufferSize,
/*IN*/ PVOID ValueBuffer
);
NTOSAPI NTSTATUS DDKAPI
IoWMISetSingleItem(
/*IN*/ PVOID DataBlockObject,
/*IN*/ PUNICODE_STRING InstanceName,
/*IN*/ ULONG DataItemId,
/*IN*/ ULONG Version,
/*IN*/ ULONG ValueBufferSize,
/*IN*/ PVOID ValueBuffer
);
NTOSAPI NTSTATUS DDKAPI
IoWMISuggestInstanceName(
/*IN*/ PDEVICE_OBJECT PhysicalDeviceObject /*OPTIONAL*/,
/*IN*/ PUNICODE_STRING SymbolicLinkName /*OPTIONAL*/,
/*IN*/ BOOLEAN CombineNames,
/*OUT*/ PUNICODE_STRING SuggestedInstanceName
);
NTOSAPI NTSTATUS DDKAPI
IoWMIWriteEvent( /*IN*/ PVOID WnodeEventItem );
NTOSAPI VOID DDKAPI
IoWriteErrorLogEntry( /*IN*/ PVOID ElEntry );
NTOSAPI NTSTATUS DDKAPI
IoWritePartitionTableEx(
/*IN*/ PDEVICE_OBJECT DeviceObject,
/*IN*/ struct _DRIVE_LAYOUT_INFORMATION_EX *PartitionBuffer
);
/** Kernel routines **/
NTOSAPI VOID DDKFASTAPI
KeAcquireInStackQueuedSpinLock(
/*IN*/ PKSPIN_LOCK SpinLock,
/*IN*/ PKLOCK_QUEUE_HANDLE LockHandle
);
NTOSAPI VOID DDKFASTAPI
KeAcquireInStackQueuedSpinLockAtDpcLevel(
/*IN*/ PKSPIN_LOCK SpinLock,
/*IN*/ PKLOCK_QUEUE_HANDLE LockHandle
);
NTOSAPI KIRQL DDKAPI
KeAcquireInterruptSpinLock( /*IN*/ PKINTERRUPT Interrupt );
NTOSAPI VOID DDKAPI
KeAcquireSpinLock( /*IN*/ PKSPIN_LOCK SpinLock, /*OUT*/ PKIRQL OldIrql );
/* System Service Dispatch Table */
typedef PVOID (NTAPI * SSDT)(VOID);
typedef SSDT * PSSDT;
/* System Service Parameters Table */
typedef UCHAR SSPT, * PSSPT;
typedef
struct _SSDT_ENTRY
{ PSSDT SSDT;
PULONG ServiceCounterTable;
ULONG NumberOfServices;
PSSPT SSPT;
} SSDT_ENTRY, *PSSDT_ENTRY;
NTOSAPI BOOLEAN DDKAPI
KeAddSystemServiceTable(
/*IN*/ PSSDT SSDT,
/*IN*/ PULONG ServiceCounterTable,
/*IN*/ ULONG NumberOfServices,
/*IN*/ PSSPT SSPT,
/*IN*/ ULONG TableIndex
);
NTOSAPI BOOLEAN DDKAPI
KeAreApcsDisabled( VOID );
NTOSAPI VOID DDKAPI
KeAttachProcess( /*IN*/ PEPROCESS Process );
NTOSAPI VOID DDKAPI
KeBugCheck( /*IN*/ ULONG BugCheckCode );
NTOSAPI VOID DDKAPI
KeBugCheckEx(
/*IN*/ ULONG BugCheckCode,
/*IN*/ ULONG_PTR BugCheckParameter1,
/*IN*/ ULONG_PTR BugCheckParameter2,
/*IN*/ ULONG_PTR BugCheckParameter3,
/*IN*/ ULONG_PTR BugCheckParameter4
);
NTOSAPI BOOLEAN DDKAPI
KeCancelTimer( /*IN*/ PKTIMER Timer );
NTOSAPI VOID DDKAPI
KeClearEvent( /*IN*/ PRKEVENT Event );
NTOSAPI NTSTATUS DDKAPI
KeDelayExecutionThread(
/*IN*/ KPROCESSOR_MODE WaitMode,
/*IN*/ BOOLEAN Alertable,
/*IN*/ PLARGE_INTEGER Interval
);
NTOSAPI BOOLEAN DDKAPI
KeDeregisterBugCheckCallback( /*IN*/ PKBUGCHECK_CALLBACK_RECORD CallbackRecord );
NTOSAPI VOID DDKAPI
KeDetachProcess( VOID );
NTOSAPI VOID DDKAPI
KeEnterCriticalRegion( VOID );
/* VOID KeFlushIoBuffers(
* IN PMDL Mdl,
* IN BOOLEAN ReadOperation,
* IN BOOLEAN DmaOperation
* )
*/
#define KeFlushIoBuffers(_Mdl, _ReadOperation, _DmaOperation)
NTOSAPI VOID DDKAPI
KeFlushQueuedDpcs( VOID );
NTOSAPI PRKTHREAD DDKAPI
KeGetCurrentThread( VOID );
NTOSAPI KPROCESSOR_MODE DDKAPI
KeGetPreviousMode( VOID );
NTOSAPI ULONG DDKAPI
KeGetRecommendedSharedDataAlignment( VOID );
NTOSAPI VOID DDKAPI
KeInitializeApc(
/*IN*/ PKAPC Apc,
/*IN*/ PKTHREAD Thread,
/*IN*/ UCHAR StateIndex,
/*IN*/ PKKERNEL_ROUTINE KernelRoutine,
/*IN*/ PKRUNDOWN_ROUTINE RundownRoutine,
/*IN*/ PKNORMAL_ROUTINE NormalRoutine,
/*IN*/ UCHAR Mode,
/*IN*/ PVOID Context
);
NTOSAPI VOID DDKAPI
KeInitializeDeviceQueue( /*IN*/ PKDEVICE_QUEUE DeviceQueue );
NTOSAPI VOID DDKAPI
KeInitializeMutex( /*IN*/ PRKMUTEX Mutex, /*IN*/ ULONG Level );
NTOSAPI VOID DDKAPI
KeInitializeSemaphore(
/*IN*/ PRKSEMAPHORE Semaphore,
/*IN*/ LONG Count,
/*IN*/ LONG Limit
);
NTOSAPI VOID DDKAPI
KeInitializeSpinLock( /*IN*/ PKSPIN_LOCK SpinLock );
NTOSAPI VOID DDKAPI
KeInitializeTimer( /*IN*/ PKTIMER Timer );
NTOSAPI VOID DDKAPI
KeInitializeTimerEx( /*IN*/ PKTIMER Timer, /*IN*/ TIMER_TYPE Type );
NTOSAPI BOOLEAN DDKAPI
KeInsertByKeyDeviceQueue(
/*IN*/ PKDEVICE_QUEUE DeviceQueue,
/*IN*/ PKDEVICE_QUEUE_ENTRY DeviceQueueEntry,
/*IN*/ ULONG SortKey
);
NTOSAPI BOOLEAN DDKAPI
KeInsertDeviceQueue(
/*IN*/ PKDEVICE_QUEUE DeviceQueue,
/*IN*/ PKDEVICE_QUEUE_ENTRY DeviceQueueEntry
);
NTOSAPI BOOLEAN DDKAPI
KeInsertQueueDpc(
/*IN*/ PRKDPC Dpc,
/*IN*/ PVOID SystemArgument1,
/*IN*/ PVOID SystemArgument2
);
NTOSAPI VOID DDKAPI
KeLeaveCriticalRegion( VOID );
static FORCEINLINE
void KeMemoryBarrier (void) { MemoryBarrier(); }
NTOSAPI NTSTATUS DDKAPI
KePulseEvent(
/*IN*/ PRKEVENT Event,
/*IN*/ KPRIORITY Increment,
/*IN*/ BOOLEAN Wait
);
NTOSAPI ULONGLONG DDKAPI
KeQueryInterruptTime( VOID );
NTOSAPI LARGE_INTEGER DDKAPI
KeQueryPerformanceCounter(
/*OUT*/ PLARGE_INTEGER PerformanceFrequency /*OPTIONAL*/
);
NTOSAPI KPRIORITY DDKAPI
KeQueryPriorityThread( /*IN*/ PRKTHREAD Thread );
NTOSAPI VOID DDKAPI
KeQuerySystemTime( /*OUT*/ PLARGE_INTEGER CurrentTime );
NTOSAPI VOID DDKAPI
KeQueryTickCount( /*OUT*/ PLARGE_INTEGER TickCount );
NTOSAPI ULONG DDKAPI
KeQueryTimeIncrement( VOID );
NTOSAPI LONG DDKAPI
KeReadStateEvent( /*IN*/ PRKEVENT Event );
NTOSAPI LONG DDKAPI
KeReadStateMutex( /*IN*/ PRKMUTEX Mutex );
NTOSAPI LONG DDKAPI
KeReadStateSemaphore( /*IN*/ PRKSEMAPHORE Semaphore );
NTOSAPI BOOLEAN DDKAPI
KeReadStateTimer( /*IN*/ PKTIMER Timer );
NTOSAPI BOOLEAN DDKAPI
KeRegisterBugCheckCallback(
/*IN*/ PKBUGCHECK_CALLBACK_RECORD CallbackRecord,
/*IN*/ PKBUGCHECK_CALLBACK_ROUTINE CallbackRoutine,
/*IN*/ PVOID Buffer,
/*IN*/ ULONG Length,
/*IN*/ PUCHAR Component
);
NTOSAPI VOID DDKFASTAPI
KeReleaseInStackQueuedSpinLock( /*IN*/ PKLOCK_QUEUE_HANDLE LockHandle );
NTOSAPI VOID DDKFASTAPI
KeReleaseInStackQueuedSpinLockFromDpcLevel(
/*IN*/ PKLOCK_QUEUE_HANDLE LockHandle
);
NTOSAPI VOID DDKAPI
KeReleaseInterruptSpinLock( /*IN*/ PKINTERRUPT Interrupt, /*IN*/ KIRQL OldIrql );
NTOSAPI LONG DDKAPI
KeReleaseMutex( /*IN*/ PRKMUTEX Mutex, /*IN*/ BOOLEAN Wait );
NTOSAPI LONG DDKAPI
KeReleaseSemaphore(
/*IN*/ PRKSEMAPHORE Semaphore,
/*IN*/ KPRIORITY Increment,
/*IN*/ LONG Adjustment,
/*IN*/ BOOLEAN Wait
);
NTOSAPI VOID DDKAPI
KeReleaseSpinLock( /*IN*/ PKSPIN_LOCK SpinLock, /*IN*/ KIRQL NewIrql );
NTOSAPI PKDEVICE_QUEUE_ENTRY DDKAPI
KeRemoveByKeyDeviceQueue(
/*IN*/ PKDEVICE_QUEUE DeviceQueue,
/*IN*/ ULONG SortKey
);
NTOSAPI PKDEVICE_QUEUE_ENTRY DDKAPI
KeRemoveDeviceQueue( /*IN*/ PKDEVICE_QUEUE DeviceQueue );
NTOSAPI BOOLEAN DDKAPI
KeRemoveEntryDeviceQueue(
/*IN*/ PKDEVICE_QUEUE DeviceQueue,
/*IN*/ PKDEVICE_QUEUE_ENTRY DeviceQueueEntry
);
NTOSAPI BOOLEAN DDKAPI
KeRemoveQueueDpc( /*IN*/ PRKDPC Dpc );
NTOSAPI LONG DDKAPI
KeResetEvent( /*IN*/ PRKEVENT Event );
NTOSAPI NTSTATUS DDKAPI
KeRestoreFloatingPointState( /*IN*/ PKFLOATING_SAVE FloatSave );
NTOSAPI NTSTATUS DDKAPI
KeSaveFloatingPointState( /*OUT*/ PKFLOATING_SAVE FloatSave );
NTOSAPI LONG DDKAPI
KeSetBasePriorityThread( /*IN*/ PRKTHREAD Thread, /*IN*/ LONG Increment );
NTOSAPI LONG DDKAPI
KeSetEvent(
/*IN*/ PRKEVENT Event,
/*IN*/ KPRIORITY Increment,
/*IN*/ BOOLEAN Wait
);
NTOSAPI VOID DDKAPI
KeSetImportanceDpc( /*IN*/ PRKDPC Dpc, /*IN*/ KDPC_IMPORTANCE Importance );
NTOSAPI KPRIORITY DDKAPI
KeSetPriorityThread( /*IN*/ PKTHREAD Thread, /*IN*/ KPRIORITY Priority );
NTOSAPI VOID DDKAPI
KeSetTargetProcessorDpc( /*IN*/ PRKDPC Dpc, /*IN*/ CCHAR Number );
NTOSAPI BOOLEAN DDKAPI
KeSetTimer(
/*IN*/ PKTIMER Timer,
/*IN*/ LARGE_INTEGER DueTime,
/*IN*/ PKDPC Dpc /*OPTIONAL*/
);
NTOSAPI BOOLEAN DDKAPI
KeSetTimerEx(
/*IN*/ PKTIMER Timer,
/*IN*/ LARGE_INTEGER DueTime,
/*IN*/ LONG Period /*OPTIONAL*/,
/*IN*/ PKDPC Dpc /*OPTIONAL*/
);
NTOSAPI VOID DDKFASTAPI
KeSetTimeUpdateNotifyRoutine( /*IN*/ PTIME_UPDATE_NOTIFY_ROUTINE NotifyRoutine );
NTOSAPI VOID DDKAPI
KeStallExecutionProcessor( /*IN*/ ULONG MicroSeconds );
NTOSAPI BOOLEAN DDKAPI
KeSynchronizeExecution(
/*IN*/ PKINTERRUPT Interrupt,
/*IN*/ PKSYNCHRONIZE_ROUTINE SynchronizeRoutine,
/*IN*/ PVOID SynchronizeContext
);
NTOSAPI NTSTATUS DDKAPI
KeWaitForMultipleObjects(
/*IN*/ ULONG Count,
/*IN*/ PVOID Object[],
/*IN*/ WAIT_TYPE WaitType,
/*IN*/ KWAIT_REASON WaitReason,
/*IN*/ KPROCESSOR_MODE WaitMode,
/*IN*/ BOOLEAN Alertable,
/*IN*/ PLARGE_INTEGER Timeout /*OPTIONAL */,
/*IN*/ PKWAIT_BLOCK WaitBlockArray /*OPTIONAL*/
);
NTOSAPI NTSTATUS DDKAPI
KeWaitForMutexObject(
/*IN*/ PRKMUTEX Mutex,
/*IN*/ KWAIT_REASON WaitReason,
/*IN*/ KPROCESSOR_MODE WaitMode,
/*IN*/ BOOLEAN Alertable,
/*IN*/ PLARGE_INTEGER Timeout /*OPTIONAL*/
);
NTOSAPI NTSTATUS DDKAPI
KeWaitForSingleObject(
/*IN*/ PVOID Object,
/*IN*/ KWAIT_REASON WaitReason,
/*IN*/ KPROCESSOR_MODE WaitMode,
/*IN*/ BOOLEAN Alertable,
/*IN*/ PLARGE_INTEGER Timeout /*OPTIONAL*/
);
NTOSAPI VOID DDKAPI
KeRaiseIrql( /*IN*/ KIRQL new_irql, /*OUT*/ PKIRQL old_irql );
NTOSAPI VOID DDKAPI
KeLowerIrql( /*IN*/ KIRQL irql );
NTOSAPI KIRQL DDKAPI
KeRaiseIrqlToDpcLevel( VOID );
/** Memory manager routines **/
NTOSAPI NTSTATUS DDKAPI
MmAdvanceMdl( /*IN*/ PMDL Mdl, /*IN*/ ULONG NumberOfBytes );
NTOSAPI PVOID DDKAPI
MmAllocateContiguousMemory(
/*IN*/ ULONG NumberOfBytes,
/*IN*/ PHYSICAL_ADDRESS HighestAcceptableAddress
);
NTOSAPI PVOID DDKAPI
MmAllocateContiguousMemorySpecifyCache(
/*IN*/ SIZE_T NumberOfBytes,
/*IN*/ PHYSICAL_ADDRESS LowestAcceptableAddress,
/*IN*/ PHYSICAL_ADDRESS HighestAcceptableAddress,
/*IN*/ PHYSICAL_ADDRESS BoundaryAddressMultiple /*OPTIONAL*/,
/*IN*/ MEMORY_CACHING_TYPE CacheType
);
NTOSAPI PVOID DDKAPI
MmAllocateMappingAddress( /*IN*/ SIZE_T NumberOfBytes, /*IN*/ ULONG PoolTag );
NTOSAPI PVOID DDKAPI
MmAllocateNonCachedMemory( /*IN*/ ULONG NumberOfBytes );
NTOSAPI PMDL DDKAPI
MmAllocatePagesForMdl(
/*IN*/ PHYSICAL_ADDRESS LowAddress,
/*IN*/ PHYSICAL_ADDRESS HighAddress,
/*IN*/ PHYSICAL_ADDRESS SkipBytes,
/*IN*/ SIZE_T TotalBytes
);
NTOSAPI VOID DDKAPI
MmBuildMdlForNonPagedPool( /*IN OUT*/ PMDL MemoryDescriptorList );
NTOSAPI NTSTATUS DDKAPI
MmCreateSection(
/*OUT*/ PSECTION_OBJECT *SectionObject,
/*IN*/ ACCESS_MASK DesiredAccess,
/*IN*/ POBJECT_ATTRIBUTES ObjectAttributes /*OPTIONAL*/,
/*IN*/ PLARGE_INTEGER MaximumSize,
/*IN*/ ULONG SectionPageProtection,
/*IN*/ ULONG AllocationAttributes,
/*IN*/ HANDLE FileHandle /*OPTIONAL*/,
/*IN*/ PFILE_OBJECT File /*OPTIONAL*/
);
typedef
enum _MMFLUSH_TYPE
{ MmFlushForDelete,
MmFlushForWrite
} MMFLUSH_TYPE;
NTOSAPI BOOLEAN DDKAPI
MmFlushImageSection(
/*IN*/ PSECTION_OBJECT_POINTERS SectionObjectPointer,
/*IN*/ MMFLUSH_TYPE FlushType
);
NTOSAPI VOID DDKAPI
MmFreeContiguousMemory( /*IN*/ PVOID BaseAddress );
NTOSAPI VOID DDKAPI
MmFreeContiguousMemorySpecifyCache(
/*IN*/ PVOID BaseAddress,
/*IN*/ SIZE_T NumberOfBytes,
/*IN*/ MEMORY_CACHING_TYPE CacheType
);
NTOSAPI VOID DDKAPI
MmFreeMappingAddress( /*IN*/ PVOID BaseAddress, /*IN*/ ULONG PoolTag );
NTOSAPI VOID DDKAPI
MmFreeNonCachedMemory( /*IN*/ PVOID BaseAddress, /*IN*/ SIZE_T NumberOfBytes );
NTOSAPI VOID DDKAPI
MmFreePagesFromMdl( /*IN*/ PMDL MemoryDescriptorList );
/* ULONG MmGetMdlByteCount( IN PMDL Mdl )
*/
#define MmGetMdlByteCount(_Mdl) ((_Mdl)->ByteCount)
/* ULONG MmGetMdlByteOffset( IN PMDL Mdl )
*/
#define MmGetMdlByteOffset(_Mdl) ((_Mdl)->ByteOffset)
/* PPFN_NUMBER MmGetMdlPfnArray( IN PMDL Mdl )
*/
#define MmGetMdlPfnArray(_Mdl) ((PPFN_NUMBER)((_Mdl) + 1))
/* PVOID MmGetMdlVirtualAddress( IN PMDL Mdl )
*/
#define MmGetMdlVirtualAddress(_Mdl) \
((PVOID) ((PCHAR) ((_Mdl)->StartVa) + (_Mdl)->ByteOffset))
NTOSAPI PHYSICAL_ADDRESS DDKAPI
MmGetPhysicalAddress( /*IN*/ PVOID BaseAddress );
NTOSAPI PPHYSICAL_MEMORY_RANGE DDKAPI
MmGetPhysicalMemoryRanges( VOID );
NTOSAPI PVOID DDKAPI
MmGetVirtualForPhysical( /*IN*/ PHYSICAL_ADDRESS PhysicalAddress );
NTOSAPI PVOID DDKAPI
MmMapLockedPagesSpecifyCache(
/*IN*/ PMDL MemoryDescriptorList,
/*IN*/ KPROCESSOR_MODE AccessMode,
/*IN*/ MEMORY_CACHING_TYPE CacheType,
/*IN*/ PVOID BaseAddress,
/*IN*/ ULONG BugCheckOnFailure,
/*IN*/ MM_PAGE_PRIORITY Priority
);
NTOSAPI PVOID DDKAPI
MmMapLockedPagesWithReservedMapping(
/*IN*/ PVOID MappingAddress,
/*IN*/ ULONG PoolTag,
/*IN*/ PMDL MemoryDescriptorList,
/*IN*/ MEMORY_CACHING_TYPE CacheType
);
NTOSAPI NTSTATUS DDKAPI
MmMapUserAddressesToPage(
/*IN*/ PVOID BaseAddress,
/*IN*/ SIZE_T NumberOfBytes,
/*IN*/ PVOID PageAddress
);
NTOSAPI PVOID DDKAPI
MmMapVideoDisplay(
/*IN*/ PHYSICAL_ADDRESS PhysicalAddress,
/*IN*/ SIZE_T NumberOfBytes,
/*IN*/ MEMORY_CACHING_TYPE CacheType
);
NTOSAPI NTSTATUS DDKAPI
MmMapViewInSessionSpace(
/*IN*/ PVOID Section,
/*OUT*/ PVOID *MappedBase,
/*IN OUT*/ PSIZE_T ViewSize
);
NTOSAPI NTSTATUS DDKAPI
MmMapViewInSystemSpace(
/*IN*/ PVOID Section,
/*OUT*/ PVOID *MappedBase,
/*IN*/ PSIZE_T ViewSize
);
NTOSAPI NTSTATUS DDKAPI
MmMarkPhysicalMemoryAsBad(
/*IN*/ PPHYSICAL_ADDRESS StartAddress,
/*IN OUT*/ PLARGE_INTEGER NumberOfBytes
);
NTOSAPI NTSTATUS DDKAPI
MmMarkPhysicalMemoryAsGood(
/*IN*/ PPHYSICAL_ADDRESS StartAddress,
/*IN OUT*/ PLARGE_INTEGER NumberOfBytes
);
/* PVOID MmGetSystemAddressForMdlSafe(
* IN PMDL Mdl,
* IN MM_PAGE_PRIORITY Priority
* )
*/
#define MmGetSystemAddressForMdlSafe(_Mdl, _Priority) \
((_Mdl)->MdlFlags & (MDL_MAPPED_TO_SYSTEM_VA \
| MDL_SOURCE_IS_NONPAGED_POOL)) \
? (_Mdl)->MappedSystemVa \
: (PVOID)(MmMapLockedPagesSpecifyCache((_Mdl), \
KernelMode, MmCached, NULL, FALSE, _Priority))
NTOSAPI PVOID DDKAPI
MmGetSystemRoutineAddress( /*IN*/ PUNICODE_STRING SystemRoutineName );
/* ULONG ADDRESS_AND_SIZE_TO_SPAN_PAGES( IN PVOID Va, IN ULONG Size )
*/
#define ADDRESS_AND_SIZE_TO_SPAN_PAGES(_Va, _Size) \
((ULONG) ((((ULONG_PTR) (_Va) & (PAGE_SIZE - 1)) \
+ (_Size) + (PAGE_SIZE - 1)) >> PAGE_SHIFT))
/* VOID MmInitializeMdl(
* IN PMDL MemoryDescriptorList,
* IN PVOID BaseVa,
* IN SIZE_T Length
* )
*/
#define MmInitializeMdl(_MemoryDescriptorList, _BaseVa, _Length) \
{ (_MemoryDescriptorList)->Next = (PMDL) NULL; \
(_MemoryDescriptorList)->Size = (CSHORT) (sizeof(MDL) + \
(sizeof(PFN_NUMBER) * ADDRESS_AND_SIZE_TO_SPAN_PAGES(_BaseVa, _Length))); \
(_MemoryDescriptorList)->MdlFlags = 0; \
(_MemoryDescriptorList)->StartVa = (PVOID) PAGE_ALIGN(_BaseVa); \
(_MemoryDescriptorList)->ByteOffset = BYTE_OFFSET(_BaseVa); \
(_MemoryDescriptorList)->ByteCount = (ULONG) _Length; \
}
NTOSAPI BOOLEAN DDKAPI
MmIsAddressValid( /*IN*/ PVOID VirtualAddress );
NTOSAPI LOGICAL DDKAPI
MmIsDriverVerifying( /*IN*/ PDRIVER_OBJECT DriverObject );
NTOSAPI BOOLEAN DDKAPI
MmIsThisAnNtAsSystem( VOID );
NTOSAPI NTSTATUS DDKAPI
MmIsVerifierEnabled( /*OUT*/ PULONG VerifierFlags );
NTOSAPI PVOID DDKAPI
MmLockPagableDataSection( /*IN*/ PVOID AddressWithinSection );
NTOSAPI PVOID DDKAPI
MmLockPagableImageSection( /*IN*/ PVOID AddressWithinSection );
/* PVOID MmLockPagableCodeSection( IN PVOID AddressWithinSection )
*/
#define MmLockPagableCodeSection MmLockPagableDataSection
NTOSAPI VOID DDKAPI
MmLockPagableSectionByHandle( /*IN*/ PVOID ImageSectionHandle );
NTOSAPI PVOID DDKAPI
MmMapIoSpace(
/*IN*/ PHYSICAL_ADDRESS PhysicalAddress,
/*IN*/ ULONG NumberOfBytes,
/*IN*/ MEMORY_CACHING_TYPE CacheEnable
);
NTOSAPI PVOID DDKAPI
MmMapLockedPages(
/*IN*/ PMDL MemoryDescriptorList,
/*IN*/ KPROCESSOR_MODE AccessMode
);
NTOSAPI VOID DDKAPI
MmPageEntireDriver( /*IN*/ PVOID AddressWithinSection );
NTOSAPI VOID DDKAPI
MmProbeAndLockProcessPages(
/*IN OUT*/ PMDL MemoryDescriptorList,
/*IN*/ PEPROCESS Process,
/*IN*/ KPROCESSOR_MODE AccessMode,
/*IN*/ LOCK_OPERATION Operation
);
NTOSAPI NTSTATUS DDKAPI
MmProtectMdlSystemAddress(
/*IN*/ PMDL MemoryDescriptorList,
/*IN*/ ULONG NewProtect
);
NTOSAPI VOID DDKAPI
MmUnmapLockedPages( /*IN*/ PVOID BaseAddress, /*IN*/ PMDL MemoryDescriptorList );
NTOSAPI NTSTATUS DDKAPI
MmUnmapViewInSessionSpace( /*IN*/ PVOID MappedBase );
NTOSAPI NTSTATUS DDKAPI
MmUnmapViewInSystemSpace( /*IN*/ PVOID MappedBase );
NTOSAPI VOID DDKAPI
MmUnsecureVirtualMemory( /*IN*/ HANDLE SecureHandle );
/* VOID MmPrepareMdlForReuse( IN PMDL Mdl )
*/
#define MmPrepareMdlForReuse(_Mdl) \
{ if (((_Mdl)->MdlFlags & MDL_PARTIAL_HAS_BEEN_MAPPED) != 0) \
{ ASSERT(((_Mdl)->MdlFlags & MDL_PARTIAL) != 0); \
MmUnmapLockedPages((_Mdl)->MappedSystemVa, (_Mdl)); \
} \
else if (((_Mdl)->MdlFlags & MDL_PARTIAL) == 0) \
{ ASSERT(((_Mdl)->MdlFlags & MDL_MAPPED_TO_SYSTEM_VA) == 0); \
} \
}
NTOSAPI VOID DDKAPI
MmProbeAndLockPages(
/*IN OUT*/ PMDL MemoryDescriptorList,
/*IN*/ KPROCESSOR_MODE AccessMode,
/*IN*/ LOCK_OPERATION Operation
);
NTOSAPI MM_SYSTEM_SIZE DDKAPI
MmQuerySystemSize( VOID );
NTOSAPI NTSTATUS DDKAPI
MmRemovePhysicalMemory(
/*IN*/ PPHYSICAL_ADDRESS StartAddress,
/*IN OUT*/ PLARGE_INTEGER NumberOfBytes
);
NTOSAPI VOID DDKAPI
MmResetDriverPaging( /*IN*/ PVOID AddressWithinSection );
NTOSAPI HANDLE DDKAPI
MmSecureVirtualMemory(
/*IN*/ PVOID Address,
/*IN*/ SIZE_T Size,
/*IN*/ ULONG ProbeMode
);
NTOSAPI ULONG DDKAPI
MmSizeOfMdl( /*IN*/ PVOID Base, /*IN*/ SIZE_T Length );
NTOSAPI VOID DDKAPI
MmUnlockPagableImageSection( /*IN*/ PVOID ImageSectionHandle );
NTOSAPI VOID DDKAPI
MmUnlockPages( /*IN*/ PMDL MemoryDescriptorList );
NTOSAPI VOID DDKAPI
MmUnmapIoSpace( /*IN*/ PVOID BaseAddress, /*IN*/ SIZE_T NumberOfBytes );
NTOSAPI VOID DDKAPI
MmUnmapReservedMapping(
/*IN*/ PVOID BaseAddress,
/*IN*/ ULONG PoolTag,
/*IN*/ PMDL MemoryDescriptorList
);
NTOSAPI VOID DDKAPI
MmUnmapVideoDisplay( /*IN*/ PVOID BaseAddress, /*IN*/ SIZE_T NumberOfBytes );
/** Object manager routines **/
NTOSAPI NTSTATUS DDKAPI
ObAssignSecurity(
/*IN*/ PACCESS_STATE AccessState,
/*IN*/ PSECURITY_DESCRIPTOR SecurityDescriptor,
/*IN*/ PVOID Object,
/*IN*/ POBJECT_TYPE Type
);
NTOSAPI VOID DDKAPI
ObDereferenceSecurityDescriptor(
PSECURITY_DESCRIPTOR SecurityDescriptor,
ULONG Count
);
NTOSAPI VOID DDKFASTAPI
ObfDereferenceObject( /*IN*/ PVOID Object );
/* VOID ObDereferenceObject( IN PVOID Object )
*/
#define ObDereferenceObject ObfDereferenceObject
NTOSAPI NTSTATUS DDKAPI
ObGetObjectSecurity(
/*IN*/ PVOID Object,
/*OUT*/ PSECURITY_DESCRIPTOR *SecurityDescriptor,
/*OUT*/ PBOOLEAN MemoryAllocated
);
NTOSAPI NTSTATUS DDKAPI
ObInsertObject(
/*IN*/ PVOID Object,
/*IN*/ PACCESS_STATE PassedAccessState /*OPTIONAL*/,
/*IN*/ ACCESS_MASK DesiredAccess,
/*IN*/ ULONG AdditionalReferences,
/*OUT*/ PVOID* ReferencedObject /*OPTIONAL*/,
/*OUT*/ PHANDLE Handle
);
NTOSAPI VOID DDKFASTAPI
ObfReferenceObject( /*IN*/ PVOID Object );
NTOSAPI NTSTATUS DDKAPI
ObLogSecurityDescriptor(
/*IN*/ PSECURITY_DESCRIPTOR InputSecurityDescriptor,
/*OUT*/ PSECURITY_DESCRIPTOR *OutputSecurityDescriptor,
/*IN*/ ULONG RefBias
);
/* VOID ObReferenceObject( IN PVOID Object )
*/
#define ObReferenceObject ObfReferenceObject
NTOSAPI VOID DDKAPI
ObMakeTemporaryObject( /*IN*/ PVOID Object );
NTOSAPI NTSTATUS DDKAPI
ObOpenObjectByName(
/*IN*/ POBJECT_ATTRIBUTES ObjectAttributes,
/*IN*/ POBJECT_TYPE ObjectType,
/*IN OUT*/ PVOID ParseContext /*OPTIONAL*/,
/*IN*/ KPROCESSOR_MODE AccessMode,
/*IN*/ ACCESS_MASK DesiredAccess,
/*IN*/ PACCESS_STATE PassedAccessState,
/*OUT*/ PHANDLE Handle
);
NTOSAPI NTSTATUS DDKAPI
ObOpenObjectByPointer(
/*IN*/ PVOID Object,
/*IN*/ ULONG HandleAttributes,
/*IN*/ PACCESS_STATE PassedAccessState /*OPTIONAL*/,
/*IN*/ ACCESS_MASK DesiredAccess /*OPTIONAL*/,
/*IN*/ POBJECT_TYPE ObjectType /*OPTIONAL*/,
/*IN*/ KPROCESSOR_MODE AccessMode,
/*OUT*/ PHANDLE Handle
);
NTOSAPI NTSTATUS DDKAPI
ObQueryObjectAuditingByHandle(
/*IN*/ HANDLE Handle,
/*OUT*/ PBOOLEAN GenerateOnClose
);
NTOSAPI NTSTATUS DDKAPI
ObReferenceObjectByHandle(
/*IN*/ HANDLE Handle,
/*IN*/ ACCESS_MASK DesiredAccess,
/*IN*/ POBJECT_TYPE ObjectType /*OPTIONAL*/,
/*IN*/ KPROCESSOR_MODE AccessMode,
/*OUT*/ PVOID *Object,
/*OUT*/ POBJECT_HANDLE_INFORMATION HandleInformation /*OPTIONAL*/
);
NTOSAPI NTSTATUS DDKAPI
ObReferenceObjectByName(
/*IN*/ PUNICODE_STRING ObjectPath,
/*IN*/ ULONG Attributes,
/*IN*/ PACCESS_STATE PassedAccessState /*OPTIONAL*/,
/*IN*/ ACCESS_MASK DesiredAccess /*OPTIONAL*/,
/*IN*/ POBJECT_TYPE ObjectType,
/*IN*/ KPROCESSOR_MODE AccessMode,
/*IN OUT*/ PVOID ParseContext /*OPTIONAL*/,
/*OUT*/ PVOID *Object
);
NTOSAPI NTSTATUS DDKAPI
ObReferenceObjectByPointer(
/*IN*/ PVOID Object,
/*IN*/ ACCESS_MASK DesiredAccess,
/*IN*/ POBJECT_TYPE ObjectType,
/*IN*/ KPROCESSOR_MODE AccessMode
);
NTOSAPI VOID DDKAPI
ObReferenceSecurityDescriptor(
/*IN*/ PSECURITY_DESCRIPTOR SecurityDescriptor,
/*IN*/ ULONG Count
);
NTOSAPI VOID DDKAPI
ObReleaseObjectSecurity(
/*IN*/ PSECURITY_DESCRIPTOR SecurityDescriptor,
/*IN*/ BOOLEAN MemoryAllocated
);
/** Process manager routines **/
NTOSAPI NTSTATUS DDKAPI
PsCreateSystemProcess(
/*IN*/ PHANDLE ProcessHandle,
/*IN*/ ACCESS_MASK DesiredAccess,
/*IN*/ POBJECT_ATTRIBUTES ObjectAttributes
);
NTOSAPI NTSTATUS DDKAPI
PsCreateSystemThread(
/*OUT*/ PHANDLE ThreadHandle,
/*IN*/ ULONG DesiredAccess,
/*IN*/ POBJECT_ATTRIBUTES ObjectAttributes /*OPTIONAL*/,
/*IN*/ HANDLE ProcessHandle /*OPTIONAL*/,
/*OUT*/ PCLIENT_ID ClientId /*OPTIONAL*/,
/*IN*/ PKSTART_ROUTINE StartRoutine,
/*IN*/ PVOID StartContext
);
/* PEPROCESS PsGetCurrentProcess( VOID )
*/
#define PsGetCurrentProcess IoGetCurrentProcess
NTOSAPI HANDLE DDKAPI
PsGetCurrentProcessId( VOID );
/* PETHREAD PsGetCurrentThread( VOID )
*/
#define PsGetCurrentThread() \
((PETHREAD) KeGetCurrentThread())
NTOSAPI HANDLE DDKAPI
PsGetCurrentThreadId( VOID );
NTOSAPI BOOLEAN DDKAPI
PsGetVersion(
PULONG MajorVersion /*OPTIONAL*/,
PULONG MinorVersion /*OPTIONAL*/,
PULONG BuildNumber /*OPTIONAL*/,
PUNICODE_STRING CSDVersion /*OPTIONAL*/
);
NTOSAPI NTSTATUS DDKAPI
PsRemoveCreateThreadNotifyRoutine(
/*IN*/ PCREATE_THREAD_NOTIFY_ROUTINE NotifyRoutine
);
NTOSAPI NTSTATUS DDKAPI
PsRemoveLoadImageNotifyRoutine(
/*IN*/ PLOAD_IMAGE_NOTIFY_ROUTINE NotifyRoutine
);
NTOSAPI NTSTATUS DDKAPI
PsSetCreateProcessNotifyRoutine(
/*IN*/ PCREATE_PROCESS_NOTIFY_ROUTINE NotifyRoutine,
/*IN*/ BOOLEAN Remove
);
NTOSAPI NTSTATUS DDKAPI
PsSetCreateThreadNotifyRoutine(
/*IN*/ PCREATE_THREAD_NOTIFY_ROUTINE NotifyRoutine
);
NTOSAPI NTSTATUS DDKAPI
PsSetLoadImageNotifyRoutine( /*IN*/ PLOAD_IMAGE_NOTIFY_ROUTINE NotifyRoutine );
NTOSAPI NTSTATUS DDKAPI
PsTerminateSystemThread( /*IN*/ NTSTATUS ExitStatus );
/** Security reference monitor routines **/
NTOSAPI BOOLEAN DDKAPI
SeAccessCheck(
/*IN*/ PSECURITY_DESCRIPTOR SecurityDescriptor,
/*IN*/ PSECURITY_SUBJECT_CONTEXT SubjectSecurityContext,
/*IN*/ BOOLEAN SubjectContextLocked,
/*IN*/ ACCESS_MASK DesiredAccess,
/*IN*/ ACCESS_MASK PreviouslyGrantedAccess,
/*OUT*/ PPRIVILEGE_SET *Privileges /*OPTIONAL*/,
/*IN*/ PGENERIC_MAPPING GenericMapping,
/*IN*/ KPROCESSOR_MODE AccessMode,
/*OUT*/ PACCESS_MASK GrantedAccess,
/*OUT*/ PNTSTATUS AccessStatus
);
NTOSAPI NTSTATUS DDKAPI
SeAssignSecurity(
/*IN*/ PSECURITY_DESCRIPTOR ParentDescriptor /*OPTIONAL*/,
/*IN*/ PSECURITY_DESCRIPTOR ExplicitDescriptor /*OPTIONAL*/,
/*OUT*/ PSECURITY_DESCRIPTOR *NewDescriptor,
/*IN*/ BOOLEAN IsDirectoryObject,
/*IN*/ PSECURITY_SUBJECT_CONTEXT SubjectContext,
/*IN*/ PGENERIC_MAPPING GenericMapping,
/*IN*/ POOL_TYPE PoolType
);
NTOSAPI NTSTATUS DDKAPI
SeAssignSecurityEx(
/*IN*/ PSECURITY_DESCRIPTOR ParentDescriptor /*OPTIONAL*/,
/*IN*/ PSECURITY_DESCRIPTOR ExplicitDescriptor /*OPTIONAL*/,
/*OUT*/ PSECURITY_DESCRIPTOR *NewDescriptor,
/*IN*/ GUID *ObjectType /*OPTIONAL*/,
/*IN*/ BOOLEAN IsDirectoryObject,
/*IN*/ ULONG AutoInheritFlags,
/*IN*/ PSECURITY_SUBJECT_CONTEXT SubjectContext,
/*IN*/ PGENERIC_MAPPING GenericMapping,
/*IN*/ POOL_TYPE PoolType
);
NTOSAPI NTSTATUS DDKAPI
SeDeassignSecurity( /*IN OUT*/ PSECURITY_DESCRIPTOR *SecurityDescriptor );
NTOSAPI BOOLEAN DDKAPI
SeSinglePrivilegeCheck( LUID PrivilegeValue, KPROCESSOR_MODE PreviousMode );
NTOSAPI BOOLEAN DDKAPI
SeValidSecurityDescriptor(
/*IN*/ ULONG Length,
/*IN*/ PSECURITY_DESCRIPTOR SecurityDescriptor
);
/** NtXxx routines **/
NTOSAPI NTSTATUS DDKAPI
NtOpenProcess(
/*OUT*/ PHANDLE ProcessHandle,
/*IN*/ ACCESS_MASK DesiredAccess,
/*IN*/ POBJECT_ATTRIBUTES ObjectAttributes,
/*IN*/ PCLIENT_ID ClientId /*OPTIONAL*/
);
NTOSAPI NTSTATUS DDKAPI
NtQueryInformationProcess(
/*IN*/ HANDLE ProcessHandle,
/*IN*/ PROCESSINFOCLASS ProcessInformationClass,
/*OUT*/ PVOID ProcessInformation,
/*IN*/ ULONG ProcessInformationLength,
/*OUT*/ PULONG ReturnLength /*OPTIONAL*/
);
/** NtXxx and ZwXxx routines **/
NTOSAPI NTSTATUS DDKAPI
NtCancelTimer(
/*IN*/ HANDLE TimerHandle,
/*OUT*/ PBOOLEAN CurrentState /*OPTIONAL*/
);
NTOSAPI NTSTATUS DDKAPI
ZwCancelTimer(
/*IN*/ HANDLE TimerHandle,
/*OUT*/ PBOOLEAN CurrentState /*OPTIONAL*/
);
NTOSAPI NTSTATUS DDKAPI
NtClose( /*IN*/ HANDLE Handle );
NTOSAPI NTSTATUS DDKAPI
ZwClose( /*IN*/ HANDLE Handle );
NTOSAPI NTSTATUS DDKAPI
NtCreateDirectoryObject(
/*OUT*/ PHANDLE DirectoryHandle,
/*IN*/ ACCESS_MASK DesiredAccess,
/*IN*/ POBJECT_ATTRIBUTES ObjectAttributes
);
NTOSAPI NTSTATUS DDKAPI
ZwCreateDirectoryObject(
/*OUT*/ PHANDLE DirectoryHandle,
/*IN*/ ACCESS_MASK DesiredAccess,
/*IN*/ POBJECT_ATTRIBUTES ObjectAttributes
);
NTOSAPI NTSTATUS DDKAPI
NtCreateEvent(
/*OUT*/ PHANDLE EventHandle,
/*IN*/ ACCESS_MASK DesiredAccess,
/*IN*/ POBJECT_ATTRIBUTES ObjectAttributes,
/*IN*/ BOOLEAN ManualReset,
/*IN*/ BOOLEAN InitialState
);
NTOSAPI NTSTATUS DDKAPI
ZwCreateEvent(
/*OUT*/ PHANDLE EventHandle,
/*IN*/ ACCESS_MASK DesiredAccess,
/*IN*/ POBJECT_ATTRIBUTES ObjectAttributes,
/*IN*/ BOOLEAN ManualReset,
/*IN*/ BOOLEAN InitialState
);
NTOSAPI NTSTATUS DDKAPI
NtCreateFile(
/*OUT*/ PHANDLE FileHandle,
/*IN*/ ACCESS_MASK DesiredAccess,
/*IN*/ POBJECT_ATTRIBUTES ObjectAttributes,
/*OUT*/ PIO_STATUS_BLOCK IoStatusBlock,
/*IN*/ PLARGE_INTEGER AllocationSize /*OPTIONAL*/,
/*IN*/ ULONG FileAttributes,
/*IN*/ ULONG ShareAccess,
/*IN*/ ULONG CreateDisposition,
/*IN*/ ULONG CreateOptions,
/*IN*/ PVOID EaBuffer /*OPTIONAL*/,
/*IN*/ ULONG EaLength
);
NTOSAPI NTSTATUS DDKAPI
ZwCreateFile(
/*OUT*/ PHANDLE FileHandle,
/*IN*/ ACCESS_MASK DesiredAccess,
/*IN*/ POBJECT_ATTRIBUTES ObjectAttributes,
/*OUT*/ PIO_STATUS_BLOCK IoStatusBlock,
/*IN*/ PLARGE_INTEGER AllocationSize /*OPTIONAL*/,
/*IN*/ ULONG FileAttributes,
/*IN*/ ULONG ShareAccess,
/*IN*/ ULONG CreateDisposition,
/*IN*/ ULONG CreateOptions,
/*IN*/ PVOID EaBuffer /*OPTIONAL*/,
/*IN*/ ULONG EaLength
);
NTOSAPI NTSTATUS DDKAPI
NtCreateKey(
/*OUT*/ PHANDLE KeyHandle,
/*IN*/ ACCESS_MASK DesiredAccess,
/*IN*/ POBJECT_ATTRIBUTES ObjectAttributes,
/*IN*/ ULONG TitleIndex,
/*IN*/ PUNICODE_STRING Class /*OPTIONAL*/,
/*IN*/ ULONG CreateOptions,
/*OUT*/ PULONG Disposition /*OPTIONAL*/
);
NTOSAPI NTSTATUS DDKAPI
ZwCreateKey(
/*OUT*/ PHANDLE KeyHandle,
/*IN*/ ACCESS_MASK DesiredAccess,
/*IN*/ POBJECT_ATTRIBUTES ObjectAttributes,
/*IN*/ ULONG TitleIndex,
/*IN*/ PUNICODE_STRING Class /*OPTIONAL*/,
/*IN*/ ULONG CreateOptions,
/*OUT*/ PULONG Disposition /*OPTIONAL*/
);
NTOSAPI NTSTATUS DDKAPI
NtCreateTimer(
/*OUT*/ PHANDLE TimerHandle,
/*IN*/ ACCESS_MASK DesiredAccess,
/*IN*/ POBJECT_ATTRIBUTES ObjectAttributes /*OPTIONAL*/,
/*IN*/ TIMER_TYPE TimerType
);
NTOSAPI NTSTATUS DDKAPI
ZwCreateTimer(
/*OUT*/ PHANDLE TimerHandle,
/*IN*/ ACCESS_MASK DesiredAccess,
/*IN*/ POBJECT_ATTRIBUTES ObjectAttributes /*OPTIONAL*/,
/*IN*/ TIMER_TYPE TimerType
);
NTOSAPI NTSTATUS DDKAPI
NtDeleteKey( /*IN*/ HANDLE KeyHandle );
NTOSAPI NTSTATUS DDKAPI
ZwDeleteKey( /*IN*/ HANDLE KeyHandle );
NTOSAPI NTSTATUS DDKAPI
NtDeleteValueKey( /*IN*/ HANDLE KeyHandle, /*IN*/ PUNICODE_STRING ValueName );
NTOSAPI NTSTATUS DDKAPI
ZwDeleteValueKey( /*IN*/ HANDLE KeyHandle, /*IN*/ PUNICODE_STRING ValueName );
NTOSAPI NTSTATUS DDKAPI
NtDeviceIoControlFile(
/*IN*/ HANDLE DeviceHandle,
/*IN*/ HANDLE Event /*OPTIONAL*/,
/*IN*/ PIO_APC_ROUTINE UserApcRoutine /*OPTIONAL*/,
/*IN*/ PVOID UserApcContext /*OPTIONAL*/,
/*OUT*/ PIO_STATUS_BLOCK IoStatusBlock,
/*IN*/ ULONG IoControlCode,
/*IN*/ PVOID InputBuffer,
/*IN*/ ULONG InputBufferSize,
/*OUT*/ PVOID OutputBuffer,
/*IN*/ ULONG OutputBufferSize
);
NTOSAPI NTSTATUS DDKAPI
ZwDeviceIoControlFile(
/*IN*/ HANDLE DeviceHandle,
/*IN*/ HANDLE Event /*OPTIONAL*/,
/*IN*/ PIO_APC_ROUTINE UserApcRoutine /*OPTIONAL*/,
/*IN*/ PVOID UserApcContext /*OPTIONAL*/,
/*OUT*/ PIO_STATUS_BLOCK IoStatusBlock,
/*IN*/ ULONG IoControlCode,
/*IN*/ PVOID InputBuffer,
/*IN*/ ULONG InputBufferSize,
/*OUT*/ PVOID OutputBuffer,
/*IN*/ ULONG OutputBufferSize
);
NTOSAPI NTSTATUS DDKAPI
NtEnumerateKey(
/*IN*/ HANDLE KeyHandle,
/*IN*/ ULONG Index,
/*IN*/ KEY_INFORMATION_CLASS KeyInformationClass,
/*OUT*/ PVOID KeyInformation,
/*IN*/ ULONG Length,
/*OUT*/ PULONG ResultLength
);
NTOSAPI NTSTATUS DDKAPI
ZwEnumerateKey(
/*IN*/ HANDLE KeyHandle,
/*IN*/ ULONG Index,
/*IN*/ KEY_INFORMATION_CLASS KeyInformationClass,
/*OUT*/ PVOID KeyInformation,
/*IN*/ ULONG Length,
/*OUT*/ PULONG ResultLength
);
NTOSAPI NTSTATUS DDKAPI
NtEnumerateValueKey(
/*IN*/ HANDLE KeyHandle,
/*IN*/ ULONG Index,
/*IN*/ KEY_VALUE_INFORMATION_CLASS KeyValueInformationClass,
/*OUT*/ PVOID KeyValueInformation,
/*IN*/ ULONG Length,
/*OUT*/ PULONG ResultLength
);
NTOSAPI NTSTATUS DDKAPI
ZwEnumerateValueKey(
/*IN*/ HANDLE KeyHandle,
/*IN*/ ULONG Index,
/*IN*/ KEY_VALUE_INFORMATION_CLASS KeyValueInformationClass,
/*OUT*/ PVOID KeyValueInformation,
/*IN*/ ULONG Length,
/*OUT*/ PULONG ResultLength
);
NTOSAPI NTSTATUS DDKAPI
NtFlushKey( /*IN*/ HANDLE KeyHandle );
NTOSAPI NTSTATUS DDKAPI
ZwFlushKey( /*IN*/ HANDLE KeyHandle );
NTOSAPI NTSTATUS DDKAPI
NtMakeTemporaryObject( /*IN*/ HANDLE Handle );
NTOSAPI NTSTATUS DDKAPI
ZwMakeTemporaryObject( /*IN*/ HANDLE Handle );
NTOSAPI NTSTATUS DDKAPI
NtMapViewOfSection(
/*IN*/ HANDLE SectionHandle,
/*IN*/ HANDLE ProcessHandle,
/*IN OUT*/ PVOID *BaseAddress,
/*IN*/ ULONG ZeroBits,
/*IN*/ ULONG CommitSize,
/*IN OUT*/ PLARGE_INTEGER SectionOffset /*OPTIONAL*/,
/*IN OUT*/ PSIZE_T ViewSize,
/*IN*/ SECTION_INHERIT InheritDisposition,
/*IN*/ ULONG AllocationType,
/*IN*/ ULONG Protect
);
NTOSAPI NTSTATUS DDKAPI
ZwMapViewOfSection(
/*IN*/ HANDLE SectionHandle,
/*IN*/ HANDLE ProcessHandle,
/*IN OUT*/ PVOID *BaseAddress,
/*IN*/ ULONG ZeroBits,
/*IN*/ ULONG CommitSize,
/*IN OUT*/ PLARGE_INTEGER SectionOffset /*OPTIONAL*/,
/*IN OUT*/ PSIZE_T ViewSize,
/*IN*/ SECTION_INHERIT InheritDisposition,
/*IN*/ ULONG AllocationType,
/*IN*/ ULONG Protect
);
NTOSAPI NTSTATUS DDKAPI
NtOpenFile(
/*OUT*/ PHANDLE FileHandle,
/*IN*/ ACCESS_MASK DesiredAccess,
/*IN*/ POBJECT_ATTRIBUTES ObjectAttributes,
/*OUT*/ PIO_STATUS_BLOCK IoStatusBlock,
/*IN*/ ULONG ShareAccess,
/*IN*/ ULONG OpenOptions
);
NTOSAPI NTSTATUS DDKAPI
ZwOpenFile(
/*OUT*/ PHANDLE FileHandle,
/*IN*/ ACCESS_MASK DesiredAccess,
/*IN*/ POBJECT_ATTRIBUTES ObjectAttributes,
/*OUT*/ PIO_STATUS_BLOCK IoStatusBlock,
/*IN*/ ULONG ShareAccess,
/*IN*/ ULONG OpenOptions
);
NTOSAPI NTSTATUS DDKAPI
NtOpenKey(
/*OUT*/ PHANDLE KeyHandle,
/*IN*/ ACCESS_MASK DesiredAccess,
/*IN*/ POBJECT_ATTRIBUTES ObjectAttributes
);
NTOSAPI NTSTATUS DDKAPI
ZwOpenKey(
/*OUT*/ PHANDLE KeyHandle,
/*IN*/ ACCESS_MASK DesiredAccess,
/*IN*/ POBJECT_ATTRIBUTES ObjectAttributes
);
NTOSAPI NTSTATUS DDKAPI
NtOpenSection(
/*OUT*/ PHANDLE SectionHandle,
/*IN*/ ACCESS_MASK DesiredAccess,
/*IN*/ POBJECT_ATTRIBUTES ObjectAttributes
);
NTOSAPI NTSTATUS DDKAPI
ZwOpenSection(
/*OUT*/ PHANDLE SectionHandle,
/*IN*/ ACCESS_MASK DesiredAccess,
/*IN*/ POBJECT_ATTRIBUTES ObjectAttributes
);
NTOSAPI NTSTATUS DDKAPI
NtOpenSymbolicLinkObject(
/*OUT*/ PHANDLE LinkHandle,
/*IN*/ ACCESS_MASK DesiredAccess,
/*IN*/ POBJECT_ATTRIBUTES ObjectAttributes
);
NTOSAPI NTSTATUS DDKAPI
ZwOpenSymbolicLinkObject(
/*OUT*/ PHANDLE LinkHandle,
/*IN*/ ACCESS_MASK DesiredAccess,
/*IN*/ POBJECT_ATTRIBUTES ObjectAttributes
);
NTOSAPI NTSTATUS DDKAPI
NtOpenTimer(
/*OUT*/ PHANDLE TimerHandle,
/*IN*/ ACCESS_MASK DesiredAccess,
/*IN*/ POBJECT_ATTRIBUTES ObjectAttributes
);
NTOSAPI NTSTATUS DDKAPI
ZwOpenTimer(
/*OUT*/ PHANDLE TimerHandle,
/*IN*/ ACCESS_MASK DesiredAccess,
/*IN*/ POBJECT_ATTRIBUTES ObjectAttributes
);
NTOSAPI NTSTATUS DDKAPI
NtQueryInformationFile(
/*IN*/ HANDLE FileHandle,
/*OUT*/ PIO_STATUS_BLOCK IoStatusBlock,
/*OUT*/ PVOID FileInformation,
/*IN*/ ULONG Length,
/*IN*/ FILE_INFORMATION_CLASS FileInformationClass
);
NTOSAPI NTSTATUS DDKAPI
ZwQueryInformationFile(
/*IN*/ HANDLE FileHandle,
/*OUT*/ PIO_STATUS_BLOCK IoStatusBlock,
/*OUT*/ PVOID FileInformation,
/*IN*/ ULONG Length,
/*IN*/ FILE_INFORMATION_CLASS FileInformationClass
);
NTOSAPI NTSTATUS DDKAPI
NtQueryKey(
/*IN*/ HANDLE KeyHandle,
/*IN*/ KEY_INFORMATION_CLASS KeyInformationClass,
/*OUT*/ PVOID KeyInformation,
/*IN*/ ULONG Length,
/*OUT*/ PULONG ResultLength
);
NTOSAPI NTSTATUS DDKAPI
ZwQueryKey(
/*IN*/ HANDLE KeyHandle,
/*IN*/ KEY_INFORMATION_CLASS KeyInformationClass,
/*OUT*/ PVOID KeyInformation,
/*IN*/ ULONG Length,
/*OUT*/ PULONG ResultLength
);
NTOSAPI NTSTATUS DDKAPI
NtQuerySymbolicLinkObject(
/*IN*/ HANDLE LinkHandle,
/*IN OUT*/ PUNICODE_STRING LinkTarget,
/*OUT*/ PULONG ReturnedLength /*OPTIONAL*/
);
NTOSAPI NTSTATUS DDKAPI
ZwQuerySymbolicLinkObject(
/*IN*/ HANDLE LinkHandle,
/*IN OUT*/ PUNICODE_STRING LinkTarget,
/*OUT*/ PULONG ReturnedLength /*OPTIONAL*/
);
NTOSAPI NTSTATUS DDKAPI
NtQueryTimer(
/*IN*/ HANDLE TimerHandle,
/*IN*/ TIMER_INFORMATION_CLASS TimerInformationClass,
/*OUT*/ PVOID TimerInformation,
/*IN*/ ULONG TimerInformationLength,
/*OUT*/ PULONG ReturnedLength /*OPTIONAL*/
);
NTOSAPI NTSTATUS DDKAPI
ZwQueryTimer(
/*IN*/ HANDLE TimerHandle,
/*IN*/ TIMER_INFORMATION_CLASS TimerInformationClass,
/*OUT*/ PVOID TimerInformation,
/*IN*/ ULONG TimerInformationLength,
/*OUT*/ PULONG ReturnedLength /*OPTIONAL*/
);
NTOSAPI NTSTATUS DDKAPI
NtQueryValueKey(
/*IN*/ HANDLE KeyHandle,
/*IN*/ PUNICODE_STRING ValueName,
/*IN*/ KEY_VALUE_INFORMATION_CLASS KeyValueInformationClass,
/*OUT*/ PVOID KeyValueInformation,
/*IN*/ ULONG Length,
/*OUT*/ PULONG ResultLength
);
NTOSAPI NTSTATUS DDKAPI
ZwQueryValueKey(
/*IN*/ HANDLE KeyHandle,
/*IN*/ PUNICODE_STRING ValueName,
/*IN*/ KEY_VALUE_INFORMATION_CLASS KeyValueInformationClass,
/*OUT*/ PVOID KeyValueInformation,
/*IN*/ ULONG Length,
/*OUT*/ PULONG ResultLength
);
NTOSAPI NTSTATUS DDKAPI
NtReadFile(
/*IN*/ HANDLE FileHandle,
/*IN*/ HANDLE Event /*OPTIONAL*/,
/*IN*/ PIO_APC_ROUTINE ApcRoutine /*OPTIONAL*/,
/*IN*/ PVOID ApcContext /*OPTIONAL*/,
/*OUT*/ PIO_STATUS_BLOCK IoStatusBlock,
/*OUT*/ PVOID Buffer,
/*IN*/ ULONG Length,
/*IN*/ PLARGE_INTEGER ByteOffset /*OPTIONAL*/,
/*IN*/ PULONG Key /*OPTIONAL*/
);
NTOSAPI NTSTATUS DDKAPI
ZwReadFile(
/*IN*/ HANDLE FileHandle,
/*IN*/ HANDLE Event /*OPTIONAL*/,
/*IN*/ PIO_APC_ROUTINE ApcRoutine /*OPTIONAL*/,
/*IN*/ PVOID ApcContext /*OPTIONAL*/,
/*OUT*/ PIO_STATUS_BLOCK IoStatusBlock,
/*OUT*/ PVOID Buffer,
/*IN*/ ULONG Length,
/*IN*/ PLARGE_INTEGER ByteOffset /*OPTIONAL*/,
/*IN*/ PULONG Key /*OPTIONAL*/
);
NTOSAPI NTSTATUS DDKAPI
NtSetEvent( /*IN*/ HANDLE EventHandle, /*IN*/ PULONG NumberOfThreadsReleased );
NTOSAPI NTSTATUS DDKAPI
ZwSetEvent( /*IN*/ HANDLE EventHandle, /*IN*/ PULONG NumberOfThreadsReleased );
NTOSAPI NTSTATUS DDKAPI
NtSetInformationFile(
/*IN*/ HANDLE FileHandle,
/*OUT*/ PIO_STATUS_BLOCK IoStatusBlock,
/*IN*/ PVOID FileInformation,
/*IN*/ ULONG Length,
/*IN*/ FILE_INFORMATION_CLASS FileInformationClass
);
NTOSAPI NTSTATUS DDKAPI
ZwSetInformationFile(
/*IN*/ HANDLE FileHandle,
/*OUT*/ PIO_STATUS_BLOCK IoStatusBlock,
/*IN*/ PVOID FileInformation,
/*IN*/ ULONG Length,
/*IN*/ FILE_INFORMATION_CLASS FileInformationClass
);
NTOSAPI NTSTATUS DDKAPI
NtSetInformationThread(
/*IN*/ HANDLE ThreadHandle,
/*IN*/ THREADINFOCLASS ThreadInformationClass,
/*IN*/ PVOID ThreadInformation,
/*IN*/ ULONG ThreadInformationLength
);
NTOSAPI NTSTATUS DDKAPI
ZwSetInformationThread(
/*IN*/ HANDLE ThreadHandle,
/*IN*/ THREADINFOCLASS ThreadInformationClass,
/*IN*/ PVOID ThreadInformation,
/*IN*/ ULONG ThreadInformationLength
);
NTOSAPI NTSTATUS DDKAPI
NtSetTimer(
/*IN*/ HANDLE TimerHandle,
/*IN*/ PLARGE_INTEGER DueTime,
/*IN*/ PTIMER_APC_ROUTINE TimerApcRoutine /*OPTIONAL*/,
/*IN*/ PVOID TimerContext /*OPTIONAL*/,
/*IN*/ BOOLEAN WakeTimer,
/*IN*/ LONG Period /*OPTIONAL*/,
/*OUT*/ PBOOLEAN PreviousState /*OPTIONAL*/
);
NTOSAPI NTSTATUS DDKAPI
ZwSetTimer(
/*IN*/ HANDLE TimerHandle,
/*IN*/ PLARGE_INTEGER DueTime,
/*IN*/ PTIMER_APC_ROUTINE TimerApcRoutine /*OPTIONAL*/,
/*IN*/ PVOID TimerContext /*OPTIONAL*/,
/*IN*/ BOOLEAN WakeTimer,
/*IN*/ LONG Period /*OPTIONAL*/,
/*OUT*/ PBOOLEAN PreviousState /*OPTIONAL*/
);
NTOSAPI NTSTATUS DDKAPI
NtSetValueKey(
/*IN*/ HANDLE KeyHandle,
/*IN*/ PUNICODE_STRING ValueName,
/*IN*/ ULONG TitleIndex /*OPTIONAL*/,
/*IN*/ ULONG Type,
/*IN*/ PVOID Data,
/*IN*/ ULONG DataSize
);
NTOSAPI NTSTATUS DDKAPI
ZwSetValueKey(
/*IN*/ HANDLE KeyHandle,
/*IN*/ PUNICODE_STRING ValueName,
/*IN*/ ULONG TitleIndex /*OPTIONAL*/,
/*IN*/ ULONG Type,
/*IN*/ PVOID Data,
/*IN*/ ULONG DataSize
);
/* [Nt|Zw]MapViewOfSection.InheritDisposition constants
*/
#define AT_EXTENDABLE_FILE 0x00002000
#define SEC_NO_CHANGE 0x00400000
#define AT_RESERVED 0x20000000
#define AT_ROUND_TO_PAGE 0x40000000
NTOSAPI NTSTATUS DDKAPI
NtUnmapViewOfSection( /*IN*/ HANDLE ProcessHandle, /*IN*/ PVOID BaseAddress );
NTOSAPI NTSTATUS DDKAPI
ZwUnmapViewOfSection( /*IN*/ HANDLE ProcessHandle, /*IN*/ PVOID BaseAddress );
NTOSAPI NTSTATUS DDKAPI
NtWaitForSingleObject(
/*IN*/ HANDLE Object,
/*IN*/ BOOLEAN Alertable,
/*IN*/ PLARGE_INTEGER Time
);
NTOSAPI NTSTATUS DDKAPI
ZwWaitForSingleObject(
/*IN*/ HANDLE Object,
/*IN*/ BOOLEAN Alertable,
/*IN*/ PLARGE_INTEGER Time
);
NTOSAPI NTSTATUS DDKAPI
NtWriteFile(
/*IN*/ HANDLE FileHandle,
/*IN*/ HANDLE Event /*OPTIONAL*/,
/*IN*/ PIO_APC_ROUTINE ApcRoutine /*OPTIONAL*/,
/*IN*/ PVOID ApcContext /*OPTIONAL*/,
/*OUT*/ PIO_STATUS_BLOCK IoStatusBlock,
/*IN*/ PVOID Buffer,
/*IN*/ ULONG Length,
/*IN*/ PLARGE_INTEGER ByteOffset /*OPTIONAL*/,
/*IN*/ PULONG Key /*OPTIONAL*/
);
NTOSAPI NTSTATUS DDKAPI
ZwWriteFile(
/*IN*/ HANDLE FileHandle,
/*IN*/ HANDLE Event /*OPTIONAL*/,
/*IN*/ PIO_APC_ROUTINE ApcRoutine /*OPTIONAL*/,
/*IN*/ PVOID ApcContext /*OPTIONAL*/,
/*OUT*/ PIO_STATUS_BLOCK IoStatusBlock,
/*IN*/ PVOID Buffer,
/*IN*/ ULONG Length,
/*IN*/ PLARGE_INTEGER ByteOffset /*OPTIONAL*/,
/*IN*/ PULONG Key /*OPTIONAL*/
);
/** Power management support routines **/
NTOSAPI NTSTATUS DDKAPI
PoCallDriver( /*IN*/ PDEVICE_OBJECT DeviceObject, /*IN OUT*/ PIRP Irp );
NTOSAPI PULONG DDKAPI
PoRegisterDeviceForIdleDetection(
/*IN*/ PDEVICE_OBJECT DeviceObject,
/*IN*/ ULONG ConservationIdleTime,
/*IN*/ ULONG PerformanceIdleTime,
/*IN*/ DEVICE_POWER_STATE State
);
NTOSAPI PVOID DDKAPI
PoRegisterSystemState( /*IN*/ PVOID StateHandle, /*IN*/ EXECUTION_STATE Flags );
NTOSAPI NTSTATUS DDKAPI
PoRequestPowerIrp(
/*IN*/ PDEVICE_OBJECT DeviceObject,
/*IN*/ UCHAR MinorFunction,
/*IN*/ POWER_STATE PowerState,
/*IN*/ PREQUEST_POWER_COMPLETE CompletionFunction,
/*IN*/ PVOID Context,
/*OUT*/ PIRP *Irp /*OPTIONAL*/
);
NTOSAPI NTSTATUS DDKAPI
PoRequestShutdownEvent( /*OUT*/ PVOID *Event );
NTOSAPI VOID DDKAPI
PoSetDeviceBusy( PULONG IdlePointer );
NTOSAPI POWER_STATE DDKAPI
PoSetPowerState(
/*IN*/ PDEVICE_OBJECT DeviceObject,
/*IN*/ POWER_STATE_TYPE Type,
/*IN*/ POWER_STATE State
);
NTOSAPI VOID DDKAPI
PoSetSystemState( /*IN*/ EXECUTION_STATE Flags );
NTOSAPI VOID DDKAPI
PoStartNextPowerIrp( /*IN*/ PIRP Irp );
NTOSAPI VOID DDKAPI
PoUnregisterSystemState( /*IN*/ PVOID StateHandle );
/** WMI library support routines **/
NTOSAPI NTSTATUS DDKAPI
WmiCompleteRequest(
/*IN*/ PDEVICE_OBJECT DeviceObject,
/*IN*/ PIRP Irp,
/*IN*/ NTSTATUS Status,
/*IN*/ ULONG BufferUsed,
/*IN*/ CCHAR PriorityBoost
);
NTOSAPI NTSTATUS DDKAPI
WmiFireEvent(
/*IN*/ PDEVICE_OBJECT DeviceObject,
/*IN*/ LPGUID Guid,
/*IN*/ ULONG InstanceIndex,
/*IN*/ ULONG EventDataSize,
/*IN*/ PVOID EventData
);
NTOSAPI NTSTATUS DDKAPI
WmiQueryTraceInformation(
/*IN*/ TRACE_INFORMATION_CLASS TraceInformationClass,
/*OUT*/ PVOID TraceInformation,
/*IN*/ ULONG TraceInformationLength,
/*OUT*/ PULONG RequiredLength /*OPTIONAL*/,
/*IN*/ PVOID Buffer /*OPTIONAL*/
);
NTOSAPI NTSTATUS DDKAPI
WmiSystemControl(
/*IN*/ PWMILIB_CONTEXT WmiLibInfo,
/*IN*/ PDEVICE_OBJECT DeviceObject,
/*IN*/ PIRP Irp,
/*OUT*/ PSYSCTL_IRP_DISPOSITION IrpDisposition
);
NTOSAPI NTSTATUS DDKCDECLAPI
WmiTraceMessage(
/*IN*/ TRACEHANDLE LoggerHandle,
/*IN*/ ULONG MessageFlags,
/*IN*/ LPGUID MessageGuid,
/*IN*/ USHORT MessageNumber,
/*IN*/ ...
);
#if 0
/* FIXME: Get va_list from where? */
NTOSAPI NTSTATUS DDKCDECLAPI
WmiTraceMessageVa(
/*IN*/ TRACEHANDLE LoggerHandle,
/*IN*/ ULONG MessageFlags,
/*IN*/ LPGUID MessageGuid,
/*IN*/ USHORT MessageNumber,
/*IN*/ va_list MessageArgList
);
#endif
/** Kernel debugger routines **/
NTOSAPI VOID DDKAPI
KdDisableDebugger( VOID );
NTOSAPI VOID DDKAPI
KdEnableDebugger( VOID );
NTOSAPI VOID DDKAPI
DbgBreakPoint( VOID );
NTOSAPI VOID DDKAPI
DbgBreakPointWithStatus( /*IN*/ ULONG Status );
NTOSAPI ULONG DDKCDECLAPI
DbgPrint( /*IN*/ PCH Format, /*IN*/ ... );
NTOSAPI ULONG DDKCDECLAPI
DbgPrintEx(
/*IN*/ ULONG ComponentId,
/*IN*/ ULONG Level,
/*IN*/ PCH Format,
/*IN*/ ...
);
NTOSAPI ULONG DDKCDECLAPI
DbgPrintReturnControlC( /*IN*/ PCH Format, /*IN*/ ... );
NTOSAPI NTSTATUS DDKAPI
DbgQueryDebugFilterState( /*IN*/ ULONG ComponentId, /*IN*/ ULONG Level );
NTOSAPI NTSTATUS DDKAPI
DbgSetDebugFilterState(
/*IN*/ ULONG ComponentId,
/*IN*/ ULONG Level,
/*IN*/ BOOLEAN State
);
#ifdef DBG
#define KdPrint(_x_) DbgPrint _x_
#define KdPrintEx(_x_) DbgPrintEx _x_
#define KdBreakPoint() DbgBreakPoint()
#define KdBreakPointWithStatus(s) DbgBreakPointWithStatus(s)
#else /* !DBG */
#define KdPrint(_x_)
#define KdPrintEx(_x_)
#define KdBreakPoint()
#define KdBreakPointWithStatus(s)
#endif /* !DBG */
extern NTOSAPI PBOOLEAN KdDebuggerNotPresent;
extern NTOSAPI PBOOLEAN KdDebuggerEnabled;
#define KD_DEBUGGER_ENABLED *KdDebuggerEnabled
#define KD_DEBUGGER_NOT_PRESENT *KdDebuggerNotPresent
_END_C_DECLS
#endif /* _DDK_WINDDK_H */
#endif /* _DDK_NTDDK_H || __WINIOCTL_H_SOURCED__ */
#endif /* !_DDK_WINDDK_H: $RCSfile: winddk.h,v $: end of file */
Reference in a new issue Copy permalink