include/ddk/wdm.h

   1 /*
   2  * Copyright 2004-2005 Ivan Leo Puoti
   3  *
   4  * This library is free software; you can redistribute it and/or
   5  * modify it under the terms of the GNU Lesser General Public
   6  * License as published by the Free Software Foundation; either
   7  * version 2.1 of the License, or (at your option) any later version.
   8  *
   9  * This library is distributed in the hope that it will be useful,
  10  * but WITHOUT ANY WARRANTY; without even the implied warranty of
  11  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
  12  * Lesser General Public License for more details.
  13  *
  14  * You should have received a copy of the GNU Lesser General Public
  15  * License along with this library; if not, write to the Free Software
  16  * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301, USA
  17  */
  18
  19 #ifndef _WDMDDK_
  20 #define _WDMDDK_
  21 #define _NTDDK_
  22
  23 #include <ntstatus.h>
  24
  25 #ifdef _WIN64
  26 #define POINTER_ALIGNMENT DECLSPEC_ALIGN(8)
  27 #else
  28 #define POINTER_ALIGNMENT
  29 #endif
  30
  31 typedef LONG KPRIORITY;
  32
  33 typedef ULONG_PTR KSPIN_LOCK, *PKSPIN_LOCK;
  34
  35 struct _KDPC;
  36 struct _KAPC;
  37 struct _IRP;
  38 struct _DEVICE_OBJECT;
  39 struct _DRIVER_OBJECT;
  40
  41 typedef VOID (WINAPI *PKDEFERRED_ROUTINE)(struct _KDPC *, PVOID, PVOID, PVOID);
  42 typedef VOID (WINAPI *PKSTART_ROUTINE)(PVOID);
  43
  44 typedef NTSTATUS (WINAPI *PDRIVER_INITIALIZE)(struct _DRIVER_OBJECT *, PUNICODE_STRING);
  45 typedef NTSTATUS (WINAPI *PDRIVER_DISPATCH)(struct _DEVICE_OBJECT *, struct _IRP *);
  46 typedef void (WINAPI *PDRIVER_STARTIO)(struct _DEVICE_OBJECT *, struct _IRP *);
  47 typedef void (WINAPI *PDRIVER_UNLOAD)(struct _DRIVER_OBJECT *);
  48
  49 typedef struct _DISPATCHER_HEADER {
  50   UCHAR  Type;
  51   UCHAR  Absolute;
  52   UCHAR  Size;
  53   UCHAR  Inserted;
  54   LONG  SignalState;
  55   LIST_ENTRY  WaitListHead;
  56 } DISPATCHER_HEADER, *PDISPATCHER_HEADER;
  57
  58 typedef struct _KEVENT {
  59   DISPATCHER_HEADER  Header;
  60 } KEVENT, *PKEVENT, *RESTRICTED_POINTER PRKEVENT;
  61
  62 typedef struct _KSEMAPHORE {
  63   DISPATCHER_HEADER  Header;
  64   LONG Limit;
  65 } KSEMAPHORE, *PKSEMAPHORE, *PRKSEMAPHORE;
  66
  67 typedef struct _KDPC {
  68   CSHORT  Type;
  69   UCHAR  Number;
  70   UCHAR  Importance;
  71   LIST_ENTRY  DpcListEntry;
  72   PKDEFERRED_ROUTINE  DeferredRoutine;
  73   PVOID  DeferredContext;
  74   PVOID  SystemArgument1;
  75   PVOID  SystemArgument2;
  76   PULONG_PTR  Lock;
  77 } KDPC, *PKDPC, *RESTRICTED_POINTER PRKDPC;
  78
  79 typedef struct _KDEVICE_QUEUE_ENTRY {
  80   LIST_ENTRY  DeviceListEntry;
  81   ULONG  SortKey;
  82   BOOLEAN  Inserted;
  83 } KDEVICE_QUEUE_ENTRY, *PKDEVICE_QUEUE_ENTRY,
  84 *RESTRICTED_POINTER PRKDEVICE_QUEUE_ENTRY;
  85
  86 typedef struct _KDEVICE_QUEUE {
  87   CSHORT  Type;
  88   CSHORT  Size;
  89   LIST_ENTRY  DeviceListHead;
  90   KSPIN_LOCK  Lock;
  91   BOOLEAN  Busy;
  92 } KDEVICE_QUEUE, *PKDEVICE_QUEUE, *RESTRICTED_POINTER PRKDEVICE_QUEUE;
  93
  94 typedef struct _KMUTANT {
  95     DISPATCHER_HEADER Header;
  96     LIST_ENTRY MutantListEntry;
  97     struct _KTHREAD *RESTRICTED_POINTER OwnerThread;
  98     BOOLEAN Abandoned;
  99     UCHAR ApcDisable;
 100 } KMUTANT, *PKMUTANT, *RESTRICTED_POINTER PRKMUTANT, KMUTEX, *PKMUTEX, *RESTRICTED_POINTER PRKMUTEX;
 101
 102 typedef enum _KWAIT_REASON
 103 {
 104     Executive,
 105     FreePage,
 106     PageIn,
 107     PoolAllocation,
 108     DelayExecution,
 109     Suspended,
 110     UserRequest,
 111     WrExecutive,
 112     WrFreePage,
 113     WrPageIn,
 114     WrDelayExecution,
 115     WrSuspended,
 116     WrUserRequest,
 117     WrQueue,
 118     WrLpcReceive,
 119     WrLpcReply,
 120     WrVirtualMemory,
 121     WrPageOut,
 122     WrRendezvous,
 123     Spare2,
 124     Spare3,
 125     Spare4,
 126     Spare5,
 127     Spare6,
 128     WrKernel,
 129     MaximumWaitReason,
 130 } KWAIT_REASON;
 131
 132 typedef struct _ALLOCATE_FUNCTION *PALLOCATE_FUNCTION;
 133 typedef struct _IO_TIMER *PIO_TIMER;
 134 typedef struct _IO_TIMER_ROUTINE *PIO_TIMER_ROUTINE;
 135 typedef struct _ETHREAD *PETHREAD;
 136 typedef struct _FREE_FUNCTION *PFREE_FUNCTION;
 137 typedef struct _KTHREAD *PKTHREAD, *PRKTHREAD;
 138 typedef struct _EPROCESS *PEPROCESS;
 139 typedef struct _ERESOURCE *PERESOURCE;
 140 typedef struct _IO_WORKITEM *PIO_WORKITEM;
 141 typedef struct _NPAGED_LOOKASIDE_LIST *PNPAGED_LOOKASIDE_LIST;
 142 typedef struct _OBJECT_TYPE *POBJECT_TYPE;
 143 typedef struct _OBJECT_HANDLE_INFORMATION *POBJECT_HANDLE_INFORMATION;
 144 typedef struct _ZONE_HEADER *PZONE_HEADER;
 145
 146 typedef struct _FAST_MUTEX
 147 {
 148     LONG Count;
 149     PKTHREAD Owner;
 150     ULONG Contention;
 151     KEVENT Gate;
 152     ULONG OldIrql;
 153 } FAST_MUTEX, *PFAST_MUTEX;
 154
 155 #define MAXIMUM_VOLUME_LABEL_LENGTH       (32 * sizeof(WCHAR))
 156
 157 typedef struct _VPB {
 158   CSHORT  Type;
 159   CSHORT  Size;
 160   USHORT  Flags;
 161   USHORT  VolumeLabelLength;
 162   struct _DEVICE_OBJECT  *DeviceObject;
 163   struct _DEVICE_OBJECT  *RealDevice;
 164   ULONG  SerialNumber;
 165   ULONG  ReferenceCount;
 166   WCHAR  VolumeLabel[MAXIMUM_VOLUME_LABEL_LENGTH / sizeof(WCHAR)];
 167 } VPB, *PVPB;
 168
 169 typedef enum _POOL_TYPE {
 170   NonPagedPool,
 171   PagedPool,
 172   NonPagedPoolMustSucceed,
 173   UnkownType,
 174   NonPagedPoolCacheAligned,
 175   PagedPoolCacheAligned,
 176   NonPagedPoolCacheAlignedMustS,
 177   MaxPoolType
 178 } POOL_TYPE;
 179
 180 typedef struct _WAIT_CONTEXT_BLOCK {
 181   KDEVICE_QUEUE_ENTRY  WaitQueueEntry;
 182   struct _DRIVER_CONTROL  *DeviceRoutine;
 183   PVOID  DeviceContext;
 184   ULONG  NumberOfMapRegisters;
 185   PVOID  DeviceObject;
 186   PVOID  CurrentIrp;
 187   PKDPC  BufferChainingDpc;
 188 } WAIT_CONTEXT_BLOCK, *PWAIT_CONTEXT_BLOCK;
 189
 190 #define DO_BUFFERED_IO                  0x00000004
 191 #define DO_EXCLUSIVE                    0x00000008
 192 #define DO_DIRECT_IO                    0x00000010
 193 #define DO_MAP_IO_BUFFER                0x00000020
 194 #define DO_DEVICE_INITIALIZING          0x00000080
 195 #define DO_SHUTDOWN_REGISTERED          0x00000800
 196 #define DO_BUS_ENUMERATED_DEVICE        0x00001000
 197 #define DO_POWER_PAGABLE                0x00002000
 198 #define DO_POWER_INRUSH                 0x00004000
 199
 200 #define IO_NO_INCREMENT                     0
 201 #define IO_CD_ROM_INCREMENT                 1
 202 #define IO_DISK_INCREMENT                   1
 203 #define IO_KEYBOARD_INCREMENT               6
 204 #define IO_MAILSLOT_INCREMENT               2
 205 #define IO_MOUSE_INCREMENT                  6
 206 #define IO_NAMED_PIPE_INCREMENT             2
 207 #define IO_NETWORK_INCREMENT                2
 208 #define IO_PARALLEL_INCREMENT               1
 209 #define IO_SERIAL_INCREMENT                 2
 210 #define IO_SOUND_INCREMENT                  8
 211 #define IO_VIDEO_INCREMENT                  1
 212
 213 #ifndef DEVICE_TYPE
 214 #define DEVICE_TYPE ULONG
 215 #endif
 216 #define IRP_MJ_MAXIMUM_FUNCTION           0x1b
 217 #define IRP_MJ_CREATE                     0x00
 218 #define IRP_MJ_CREATE_NAMED_PIPE          0x01
 219 #define IRP_MJ_CLOSE                      0x02
 220 #define IRP_MJ_READ                       0x03
 221 #define IRP_MJ_WRITE                      0x04
 222 #define IRP_MJ_QUERY_INFORMATION          0x05
 223 #define IRP_MJ_SET_INFORMATION            0x06
 224 #define IRP_MJ_QUERY_EA                   0x07
 225 #define IRP_MJ_SET_EA                     0x08
 226 #define IRP_MJ_FLUSH_BUFFERS              0x09
 227 #define IRP_MJ_QUERY_VOLUME_INFORMATION   0x0a
 228 #define IRP_MJ_SET_VOLUME_INFORMATION     0x0b
 229 #define IRP_MJ_DIRECTORY_CONTROL          0x0c
 230 #define IRP_MJ_FILE_SYSTEM_CONTROL        0x0d
 231 #define IRP_MJ_DEVICE_CONTROL             0x0e
 232 #define IRP_MJ_INTERNAL_DEVICE_CONTROL    0x0f
 233 #define IRP_MJ_SHUTDOWN                   0x10
 234 #define IRP_MJ_LOCK_CONTROL               0x11
 235 #define IRP_MJ_CLEANUP                    0x12
 236 #define IRP_MJ_CREATE_MAILSLOT            0x13
 237 #define IRP_MJ_QUERY_SECURITY             0x14
 238 #define IRP_MJ_SET_SECURITY               0x15
 239 #define IRP_MJ_POWER                      0x16
 240 #define IRP_MJ_SYSTEM_CONTROL             0x17
 241 #define IRP_MJ_DEVICE_CHANGE              0x18
 242 #define IRP_MJ_QUERY_QUOTA                0x19
 243 #define IRP_MJ_SET_QUOTA                  0x1a
 244 #define IRP_MJ_PNP                        0x1b
 245
 246 #define IRP_MN_START_DEVICE                 0x00
 247 #define IRP_MN_QUERY_REMOVE_DEVICE          0x01
 248 #define IRP_MN_REMOVE_DEVICE                0x02
 249 #define IRP_MN_CANCEL_REMOVE_DEVICE         0x03
 250 #define IRP_MN_STOP_DEVICE                  0x04
 251 #define IRP_MN_QUERY_STOP_DEVICE            0x05
 252 #define IRP_MN_CANCEL_STOP_DEVICE           0x06
 253 #define IRP_MN_QUERY_DEVICE_RELATIONS       0x07
 254 #define IRP_MN_QUERY_INTERFACE              0x08
 255 #define IRP_MN_QUERY_CAPABILITIES           0x09
 256 #define IRP_MN_QUERY_RESOURCES              0x0A
 257 #define IRP_MN_QUERY_RESOURCE_REQUIREMENTS  0x0B
 258 #define IRP_MN_QUERY_DEVICE_TEXT            0x0C
 259 #define IRP_MN_FILTER_RESOURCE_REQUIREMENTS 0x0D
 260 #define IRP_MN_READ_CONFIG                  0x0F
 261 #define IRP_MN_WRITE_CONFIG                 0x10
 262 #define IRP_MN_EJECT                        0x11
 263 #define IRP_MN_SET_LOCK                     0x12
 264 #define IRP_MN_QUERY_ID                     0x13
 265 #define IRP_MN_QUERY_PNP_DEVICE_STATE       0x14
 266 #define IRP_MN_QUERY_BUS_INFORMATION        0x15
 267 #define IRP_MN_DEVICE_USAGE_NOTIFICATION    0x16
 268 #define IRP_MN_SURPRISE_REMOVAL             0x17
 269
 270 #define IRP_QUOTA_CHARGED               0x01
 271 #define IRP_ALLOCATED_MUST_SUCCEED      0x02
 272 #define IRP_ALLOCATED_FIXED_SIZE        0x04
 273 #define IRP_LOOKASIDE_ALLOCATION        0x08
 274
 275 #define IO_TYPE_ADAPTER                 0x01
 276 #define IO_TYPE_CONTROLLER              0x02
 277 #define IO_TYPE_DEVICE                  0x03
 278 #define IO_TYPE_DRIVER                  0x04
 279 #define IO_TYPE_FILE                    0x05
 280 #define IO_TYPE_IRP                     0x06
 281 #define IO_TYPE_MASTER_ADAPTER          0x07
 282 #define IO_TYPE_OPEN_PACKET             0x08
 283 #define IO_TYPE_TIMER                   0x09
 284 #define IO_TYPE_VPB                     0x0a
 285 #define IO_TYPE_ERROR_LOG               0x0b
 286 #define IO_TYPE_ERROR_MESSAGE           0x0c
 287 #define IO_TYPE_DEVICE_OBJECT_EXTENSION 0x0d
 288
 289 typedef struct _DEVICE_OBJECT {
 290   CSHORT  Type;
 291   USHORT  Size;
 292   LONG  ReferenceCount;
 293   struct _DRIVER_OBJECT  *DriverObject;
 294   struct _DEVICE_OBJECT  *NextDevice;
 295   struct _DEVICE_OBJECT  *AttachedDevice;
 296   struct _IRP  *CurrentIrp;
 297   PIO_TIMER  Timer;
 298   ULONG  Flags;
 299   ULONG  Characteristics;
 300   PVPB  Vpb;
 301   PVOID  DeviceExtension;
 302   DEVICE_TYPE  DeviceType;
 303   CCHAR  StackSize;
 304   union {
 305     LIST_ENTRY  ListEntry;
 306     WAIT_CONTEXT_BLOCK  Wcb;
 307   } Queue;
 308   ULONG  AlignmentRequirement;
 309   KDEVICE_QUEUE  DeviceQueue;
 310   KDPC  Dpc;
 311   ULONG  ActiveThreadCount;
 312   PSECURITY_DESCRIPTOR  SecurityDescriptor;
 313   KEVENT  DeviceLock;
 314   USHORT  SectorSize;
 315   USHORT  Spare1;
 316   struct _DEVOBJ_EXTENSION  *DeviceObjectExtension;
 317   PVOID  Reserved;
 318 } DEVICE_OBJECT;
 319 typedef struct _DEVICE_OBJECT *PDEVICE_OBJECT;
 320
 321 typedef struct _DRIVER_EXTENSION {
 322   struct _DRIVER_OBJECT  *DriverObject;
 323   PVOID  AddDevice;
 324   ULONG  Count;
 325   UNICODE_STRING  ServiceKeyName;
 326 } DRIVER_EXTENSION, *PDRIVER_EXTENSION;
 327
 328 typedef struct _DRIVER_OBJECT {
 329   CSHORT  Type;
 330   CSHORT  Size;
 331   PDEVICE_OBJECT  DeviceObject;
 332   ULONG  Flags;
 333   PVOID  DriverStart;
 334   ULONG  DriverSize;
 335   PVOID  DriverSection;
 336   PDRIVER_EXTENSION  DriverExtension;
 337   UNICODE_STRING  DriverName;
 338   PUNICODE_STRING  HardwareDatabase;
 339   PVOID  FastIoDispatch;
 340   PDRIVER_INITIALIZE DriverInit;
 341   PDRIVER_STARTIO    DriverStartIo;
 342   PDRIVER_UNLOAD     DriverUnload;
 343   PDRIVER_DISPATCH   MajorFunction[IRP_MJ_MAXIMUM_FUNCTION + 1];
 344 } DRIVER_OBJECT;
 345 typedef struct _DRIVER_OBJECT *PDRIVER_OBJECT;
 346
 347 /* Irp definitions */
 348 typedef UCHAR KIRQL, *PKIRQL;
 349 typedef CCHAR KPROCESSOR_MODE;
 350
 351 typedef VOID (WINAPI *PDRIVER_CANCEL)(
 352   IN struct _DEVICE_OBJECT  *DeviceObject,
 353   IN struct _IRP  *Irp);
 354
 355 typedef VOID (WINAPI *PKNORMAL_ROUTINE)(
 356   IN PVOID  NormalContext,
 357   IN PVOID  SystemArgument1,
 358   IN PVOID  SystemArgument2);
 359
 360 typedef VOID (WINAPI *PKKERNEL_ROUTINE)(
 361   IN struct _KAPC  *Apc,
 362   IN OUT PKNORMAL_ROUTINE  *NormalRoutine,
 363   IN OUT PVOID  *NormalContext,
 364   IN OUT PVOID  *SystemArgument1,
 365   IN OUT PVOID  *SystemArgument2);
 366
 367 typedef VOID (WINAPI *PKRUNDOWN_ROUTINE)(
 368   IN struct _KAPC  *Apc);
 369
 370 typedef struct _KAPC {
 371   CSHORT  Type;
 372   CSHORT  Size;
 373   ULONG  Spare0;
 374   struct _KTHREAD  *Thread;
 375   LIST_ENTRY  ApcListEntry;
 376   PKKERNEL_ROUTINE  KernelRoutine;
 377   PKRUNDOWN_ROUTINE  RundownRoutine;
 378   PKNORMAL_ROUTINE  NormalRoutine;
 379   PVOID  NormalContext;
 380   PVOID  SystemArgument1;
 381   PVOID  SystemArgument2;
 382   CCHAR  ApcStateIndex;
 383   KPROCESSOR_MODE  ApcMode;
 384   BOOLEAN  Inserted;
 385 } KAPC, *PKAPC, *RESTRICTED_POINTER PRKAPC;
 386
 387 #include <pshpack1.h>
 388 typedef struct _IRP {
 389   CSHORT  Type;
 390   USHORT  Size;
 391   struct _MDL  *MdlAddress;
 392   ULONG  Flags;
 393   union {
 394     struct _IRP  *MasterIrp;
 395     LONG  IrpCount;
 396     PVOID  SystemBuffer;
 397   } AssociatedIrp;
 398   LIST_ENTRY  ThreadListEntry;
 399   IO_STATUS_BLOCK  IoStatus;
 400   KPROCESSOR_MODE  RequestorMode;
 401   BOOLEAN  PendingReturned;
 402   CHAR  StackCount;
 403   CHAR  CurrentLocation;
 404   BOOLEAN  Cancel;
 405   KIRQL  CancelIrql;
 406   CCHAR  ApcEnvironment;
 407   UCHAR  AllocationFlags;
 408   PIO_STATUS_BLOCK  UserIosb;
 409   PKEVENT  UserEvent;
 410   union {
 411     struct {
 412       PIO_APC_ROUTINE  UserApcRoutine;
 413       PVOID  UserApcContext;
 414     } AsynchronousParameters;
 415     LARGE_INTEGER  AllocationSize;
 416   } Overlay;
 417   PDRIVER_CANCEL  CancelRoutine;
 418   PVOID  UserBuffer;
 419   union {
 420     struct {
 421        union {
 422         KDEVICE_QUEUE_ENTRY  DeviceQueueEntry;
 423         struct {
 424           PVOID  DriverContext[4];
 425         } DUMMYSTRUCTNAME;
 426       } DUMMYUNIONNAME1;
 427       PETHREAD  Thread;
 428       PCHAR  AuxiliaryBuffer;
 429       struct {
 430         LIST_ENTRY  ListEntry;
 431         union {
 432           struct _IO_STACK_LOCATION  *CurrentStackLocation;
 433           ULONG  PacketType;
 434         } DUMMYUNIONNAME2;
 435       } DUMMYSTRUCTNAME;
 436       struct _FILE_OBJECT  *OriginalFileObject;
 437     } Overlay;
 438     KAPC  Apc;
 439     PVOID  CompletionKey;
 440   } Tail;
 441 } IRP;
 442 typedef struct _IRP *PIRP;
 443 #include <poppack.h>
 444
 445 /* MDL definitions */
 446
 447 typedef VOID (WINAPI *PINTERFACE_REFERENCE)(
 448   PVOID  Context);
 449
 450 typedef VOID (WINAPI *PINTERFACE_DEREFERENCE)(
 451   PVOID Context);
 452
 453 typedef struct _INTERFACE {
 454   USHORT  Size;
 455   USHORT  Version;
 456   PVOID  Context;
 457   PINTERFACE_REFERENCE  InterfaceReference;
 458   PINTERFACE_DEREFERENCE  InterfaceDereference;
 459 } INTERFACE, *PINTERFACE;
 460
 461 typedef struct _SECTION_OBJECT_POINTERS {
 462   PVOID  DataSectionObject;
 463   PVOID  SharedCacheMap;
 464   PVOID  ImageSectionObject;
 465 } SECTION_OBJECT_POINTERS, *PSECTION_OBJECT_POINTERS;
 466
 467 typedef struct _IO_COMPLETION_CONTEXT {
 468   PVOID  Port;
 469   PVOID  Key;
 470 } IO_COMPLETION_CONTEXT, *PIO_COMPLETION_CONTEXT;
 471
 472 typedef enum _DEVICE_RELATION_TYPE {
 473   BusRelations,
 474   EjectionRelations,
 475   PowerRelations,
 476   RemovalRelations,
 477   TargetDeviceRelation,
 478   SingleBusRelations
 479 } DEVICE_RELATION_TYPE, *PDEVICE_RELATION_TYPE;
 480
 481 typedef struct _FILE_OBJECT {
 482   CSHORT  Type;
 483   CSHORT  Size;
 484   PDEVICE_OBJECT  DeviceObject;
 485   PVPB  Vpb;
 486   PVOID  FsContext;
 487   PVOID  FsContext2;
 488   PSECTION_OBJECT_POINTERS  SectionObjectPointer;
 489   PVOID  PrivateCacheMap;
 490   NTSTATUS  FinalStatus;
 491   struct _FILE_OBJECT  *RelatedFileObject;
 492   BOOLEAN  LockOperation;
 493   BOOLEAN  DeletePending;
 494   BOOLEAN  ReadAccess;
 495   BOOLEAN  WriteAccess;
 496   BOOLEAN  DeleteAccess;
 497   BOOLEAN  SharedRead;
 498   BOOLEAN  SharedWrite;
 499   BOOLEAN  SharedDelete;
 500   ULONG  Flags;
 501   UNICODE_STRING  FileName;
 502   LARGE_INTEGER  CurrentByteOffset;
 503   ULONG  Waiters;
 504   ULONG  Busy;
 505   PVOID  LastLock;
 506   KEVENT  Lock;
 507   KEVENT  Event;
 508   PIO_COMPLETION_CONTEXT  CompletionContext;
 509 } FILE_OBJECT;
 510 typedef struct _FILE_OBJECT *PFILE_OBJECT;
 511
 512 #define INITIAL_PRIVILEGE_COUNT           3
 513
 514 typedef struct _INITIAL_PRIVILEGE_SET {
 515   ULONG  PrivilegeCount;
 516   ULONG  Control;
 517   LUID_AND_ATTRIBUTES  Privilege[INITIAL_PRIVILEGE_COUNT];
 518 } INITIAL_PRIVILEGE_SET, * PINITIAL_PRIVILEGE_SET;
 519
 520 typedef struct _SECURITY_SUBJECT_CONTEXT {
 521   PACCESS_TOKEN  ClientToken;
 522   SECURITY_IMPERSONATION_LEVEL  ImpersonationLevel;
 523   PACCESS_TOKEN  PrimaryToken;
 524   PVOID  ProcessAuditId;
 525 } SECURITY_SUBJECT_CONTEXT, *PSECURITY_SUBJECT_CONTEXT;
 526
 527 typedef struct _ACCESS_STATE {
 528   LUID  OperationID;
 529   BOOLEAN  SecurityEvaluated;
 530   BOOLEAN  GenerateAudit;
 531   BOOLEAN  GenerateOnClose;
 532   BOOLEAN  PrivilegesAllocated;
 533   ULONG  Flags;
 534   ACCESS_MASK  RemainingDesiredAccess;
 535   ACCESS_MASK  PreviouslyGrantedAccess;
 536   ACCESS_MASK  OriginalDesiredAccess;
 537   SECURITY_SUBJECT_CONTEXT  SubjectSecurityContext;
 538   PSECURITY_DESCRIPTOR  SecurityDescriptor;
 539   PVOID  AuxData;
 540   union {
 541     INITIAL_PRIVILEGE_SET  InitialPrivilegeSet;
 542     PRIVILEGE_SET  PrivilegeSet;
 543   } Privileges;
 544
 545   BOOLEAN  AuditPrivileges;
 546   UNICODE_STRING  ObjectName;
 547   UNICODE_STRING  ObjectTypeName;
 548 } ACCESS_STATE, *PACCESS_STATE;
 549
 550 typedef struct _IO_SECURITY_CONTEXT {
 551   PSECURITY_QUALITY_OF_SERVICE  SecurityQos;
 552   PACCESS_STATE  AccessState;
 553   ACCESS_MASK  DesiredAccess;
 554   ULONG  FullCreateOptions;
 555 } IO_SECURITY_CONTEXT, *PIO_SECURITY_CONTEXT;
 556
 557 typedef struct _DEVICE_CAPABILITIES {
 558   USHORT  Size;
 559   USHORT  Version;
 560   ULONG  DeviceD1 : 1;
 561   ULONG  DeviceD2 : 1;
 562   ULONG  LockSupported : 1;
 563   ULONG  EjectSupported : 1;
 564   ULONG  Removable : 1;
 565   ULONG  DockDevice : 1;
 566   ULONG  UniqueID : 1;
 567   ULONG  SilentInstall : 1;
 568   ULONG  RawDeviceOK : 1;
 569   ULONG  SurpriseRemovalOK : 1;
 570   ULONG  WakeFromD0 : 1;
 571   ULONG  WakeFromD1 : 1;
 572   ULONG  WakeFromD2 : 1;
 573   ULONG  WakeFromD3 : 1;
 574   ULONG  HardwareDisabled : 1;
 575   ULONG  NonDynamic : 1;
 576   ULONG  WarmEjectSupported : 1;
 577   ULONG  NoDisplayInUI : 1;
 578   ULONG  Reserved : 14;
 579   ULONG  Address;
 580   ULONG  UINumber;
 581   DEVICE_POWER_STATE  DeviceState[PowerSystemMaximum];
 582   SYSTEM_POWER_STATE  SystemWake;
 583   DEVICE_POWER_STATE  DeviceWake;
 584   ULONG  D1Latency;
 585   ULONG  D2Latency;
 586   ULONG  D3Latency;
 587 } DEVICE_CAPABILITIES, *PDEVICE_CAPABILITIES;
 588
 589 typedef enum _INTERFACE_TYPE {
 590   InterfaceTypeUndefined = -1,
 591   Internal,
 592   Isa,
 593   Eisa,
 594   MicroChannel,
 595   TurboChannel,
 596   PCIBus,
 597   VMEBus,
 598   NuBus,
 599   PCMCIABus,
 600   CBus,
 601   MPIBus,
 602   MPSABus,
 603   ProcessorInternal,
 604   InternalPowerBus,
 605   PNPISABus,
 606   PNPBus,
 607   MaximumInterfaceType
 608 } INTERFACE_TYPE, *PINTERFACE_TYPE;
 609
 610 typedef LARGE_INTEGER PHYSICAL_ADDRESS, *PPHYSICAL_ADDRESS;
 611
 612 #define IO_RESOURCE_PREFERRED             0x01
 613 #define IO_RESOURCE_DEFAULT               0x02
 614 #define IO_RESOURCE_ALTERNATIVE           0x08
 615
 616 typedef struct _IO_RESOURCE_DESCRIPTOR {
 617   UCHAR  Option;
 618   UCHAR  Type;
 619   UCHAR  ShareDisposition;
 620   UCHAR  Spare1;
 621   USHORT  Flags;
 622   USHORT  Spare2;
 623   union {
 624     struct {
 625       ULONG  Length;
 626       ULONG  Alignment;
 627       PHYSICAL_ADDRESS  MinimumAddress;
 628       PHYSICAL_ADDRESS  MaximumAddress;
 629     } Port;
 630     struct {
 631       ULONG  Length;
 632       ULONG  Alignment;
 633       PHYSICAL_ADDRESS  MinimumAddress;
 634       PHYSICAL_ADDRESS  MaximumAddress;
 635     } Memory;
 636     struct {
 637       ULONG  MinimumVector;
 638       ULONG  MaximumVector;
 639     } Interrupt;
 640     struct {
 641       ULONG  MinimumChannel;
 642       ULONG  MaximumChannel;
 643     } Dma;
 644     struct {
 645       ULONG  Length;
 646       ULONG  Alignment;
 647       PHYSICAL_ADDRESS  MinimumAddress;
 648       PHYSICAL_ADDRESS  MaximumAddress;
 649     } Generic;
 650     struct {
 651       ULONG  Data[3];
 652     } DevicePrivate;
 653     struct {
 654       ULONG  Length;
 655       ULONG  MinBusNumber;
 656       ULONG  MaxBusNumber;
 657       ULONG  Reserved;
 658     } BusNumber;
 659     struct {
 660       ULONG  Priority;
 661       ULONG  Reserved1;
 662       ULONG  Reserved2;
 663     } ConfigData;
 664   } u;
 665 } IO_RESOURCE_DESCRIPTOR, *PIO_RESOURCE_DESCRIPTOR;
 666
 667 typedef struct _IO_RESOURCE_LIST {
 668   USHORT  Version;
 669   USHORT  Revision;
 670   ULONG  Count;
 671   IO_RESOURCE_DESCRIPTOR  Descriptors[1];
 672 } IO_RESOURCE_LIST, *PIO_RESOURCE_LIST;
 673
 674 typedef struct _IO_RESOURCE_REQUIREMENTS_LIST {
 675   ULONG  ListSize;
 676   INTERFACE_TYPE  InterfaceType;
 677   ULONG  BusNumber;
 678   ULONG  SlotNumber;
 679   ULONG  Reserved[3];
 680   ULONG  AlternativeLists;
 681   IO_RESOURCE_LIST  List[1];
 682 } IO_RESOURCE_REQUIREMENTS_LIST, *PIO_RESOURCE_REQUIREMENTS_LIST;
 683
 684 typedef enum _BUS_QUERY_ID_TYPE {
 685   BusQueryDeviceID,
 686   BusQueryHardwareIDs,
 687   BusQueryCompatibleIDs,
 688   BusQueryInstanceID,
 689   BusQueryDeviceSerialNumber
 690 } BUS_QUERY_ID_TYPE, *PBUS_QUERY_ID_TYPE;
 691
 692 typedef enum {
 693   DevicePropertyDeviceDescription,
 694   DevicePropertyHardwareID,
 695   DevicePropertyCompatibleIDs,
 696   DevicePropertyBootConfiguration,
 697   DevicePropertyBootConfigurationTranslated,
 698   DevicePropertyClassName,
 699   DevicePropertyClassGuid,
 700   DevicePropertyDriverKeyName,
 701   DevicePropertyManufacturer,
 702   DevicePropertyFriendlyName,
 703   DevicePropertyLocationInformation,
 704   DevicePropertyPhysicalDeviceObjectName,
 705   DevicePropertyBusTypeGuid,
 706   DevicePropertyLegacyBusType,
 707   DevicePropertyBusNumber,
 708   DevicePropertyEnumeratorName,
 709   DevicePropertyAddress,
 710   DevicePropertyUINumber,
 711   DevicePropertyInstallState,
 712   DevicePropertyRemovalPolicy
 713 } DEVICE_REGISTRY_PROPERTY;
 714
 715 typedef enum _DEVICE_TEXT_TYPE {
 716   DeviceTextDescription,
 717   DeviceTextLocationInformation
 718 } DEVICE_TEXT_TYPE, *PDEVICE_TEXT_TYPE;
 719
 720 typedef enum _DEVICE_USAGE_NOTIFICATION_TYPE {
 721   DeviceUsageTypeUndefined,
 722   DeviceUsageTypePaging,
 723   DeviceUsageTypeHibernation,
 724   DeviceUsageTypeDumpFile
 725 } DEVICE_USAGE_NOTIFICATION_TYPE;
 726
 727 typedef struct _POWER_SEQUENCE {
 728   ULONG  SequenceD1;
 729   ULONG  SequenceD2;
 730   ULONG  SequenceD3;
 731 } POWER_SEQUENCE, *PPOWER_SEQUENCE;
 732
 733 typedef enum _POWER_STATE_TYPE {
 734   SystemPowerState,
 735   DevicePowerState
 736 } POWER_STATE_TYPE, *PPOWER_STATE_TYPE;
 737
 738 typedef union _POWER_STATE {
 739   SYSTEM_POWER_STATE  SystemState;
 740   DEVICE_POWER_STATE  DeviceState;
 741 } POWER_STATE, *PPOWER_STATE;
 742
 743 typedef struct _CM_PARTIAL_RESOURCE_DESCRIPTOR {
 744   UCHAR Type;
 745   UCHAR ShareDisposition;
 746   USHORT Flags;
 747   union {
 748     struct {
 749       PHYSICAL_ADDRESS Start;
 750       ULONG Length;
 751     } Generic;
 752     struct {
 753       PHYSICAL_ADDRESS Start;
 754       ULONG Length;
 755     } Port;
 756     struct {
 757       ULONG Level;
 758       ULONG Vector;
 759       ULONG Affinity;
 760     } Interrupt;
 761     struct {
 762       PHYSICAL_ADDRESS Start;
 763       ULONG Length;
 764     } Memory;
 765     struct {
 766       ULONG Channel;
 767       ULONG Port;
 768       ULONG Reserved1;
 769     } Dma;
 770     struct {
 771       ULONG Data[3];
 772     } DevicePrivate;
 773     struct {
 774       ULONG Start;
 775       ULONG Length;
 776       ULONG Reserved;
 777     } BusNumber;
 778     struct {
 779       ULONG DataSize;
 780       ULONG Reserved1;
 781       ULONG Reserved2;
 782     } DeviceSpecificData;
 783   } u;
 784 } CM_PARTIAL_RESOURCE_DESCRIPTOR, *PCM_PARTIAL_RESOURCE_DESCRIPTOR;
 785
 786 typedef struct _CM_PARTIAL_RESOURCE_LIST {
 787   USHORT  Version;
 788   USHORT  Revision;
 789   ULONG  Count;
 790   CM_PARTIAL_RESOURCE_DESCRIPTOR PartialDescriptors[1];
 791 } CM_PARTIAL_RESOURCE_LIST, *PCM_PARTIAL_RESOURCE_LIST;
 792
 793 typedef struct _CM_FULL_RESOURCE_DESCRIPTOR {
 794   INTERFACE_TYPE  InterfaceType;
 795   ULONG  BusNumber;
 796   CM_PARTIAL_RESOURCE_LIST  PartialResourceList;
 797 } CM_FULL_RESOURCE_DESCRIPTOR, *PCM_FULL_RESOURCE_DESCRIPTOR;
 798
 799 typedef struct _CM_RESOURCE_LIST {
 800   ULONG  Count;
 801   CM_FULL_RESOURCE_DESCRIPTOR  List[1];
 802 } CM_RESOURCE_LIST, *PCM_RESOURCE_LIST;
 803
 804 typedef NTSTATUS (WINAPI *PIO_COMPLETION_ROUTINE)(
 805   IN struct _DEVICE_OBJECT  *DeviceObject,
 806   IN struct _IRP  *Irp,
 807   IN PVOID  Context);
 808
 809 #define SL_PENDING_RETURNED             0x01
 810 #define SL_INVOKE_ON_CANCEL             0x20
 811 #define SL_INVOKE_ON_SUCCESS            0x40
 812 #define SL_INVOKE_ON_ERROR              0x80
 813
 814 #include <pshpack1.h>
 815 typedef struct _IO_STACK_LOCATION {
 816   UCHAR  MajorFunction;
 817   UCHAR  MinorFunction;
 818   UCHAR  Flags;
 819   UCHAR  Control;
 820   union {
 821     struct {
 822       PIO_SECURITY_CONTEXT  SecurityContext;
 823       ULONG  Options;
 824       USHORT POINTER_ALIGNMENT  FileAttributes;
 825       USHORT  ShareAccess;
 826       ULONG POINTER_ALIGNMENT  EaLength;
 827     } Create;
 828     struct {
 829       ULONG  Length;
 830       ULONG POINTER_ALIGNMENT  Key;
 831       LARGE_INTEGER  ByteOffset;
 832     } Read;
 833     struct {
 834       ULONG  Length;
 835       ULONG POINTER_ALIGNMENT  Key;
 836       LARGE_INTEGER  ByteOffset;
 837     } Write;
 838     struct {
 839       ULONG  Length;
 840       FILE_INFORMATION_CLASS POINTER_ALIGNMENT  FileInformationClass;
 841     } QueryFile;
 842     struct {
 843       ULONG  Length;
 844       FILE_INFORMATION_CLASS POINTER_ALIGNMENT  FileInformationClass;
 845       PFILE_OBJECT  FileObject;
 846       union {
 847         struct {
 848           BOOLEAN  ReplaceIfExists;
 849           BOOLEAN  AdvanceOnly;
 850         } DUMMYSTRUCTNAME;
 851         ULONG  ClusterCount;
 852         HANDLE  DeleteHandle;
 853       } DUMMYUNIONNAME;
 854     } SetFile;
 855     struct {
 856       ULONG  Length;
 857       FS_INFORMATION_CLASS POINTER_ALIGNMENT  FsInformationClass;
 858     } QueryVolume;
 859     struct {
 860       ULONG  OutputBufferLength;
 861       ULONG POINTER_ALIGNMENT  InputBufferLength;
 862       ULONG POINTER_ALIGNMENT  IoControlCode;
 863       PVOID  Type3InputBuffer;
 864     } DeviceIoControl;
 865     struct {
 866       SECURITY_INFORMATION  SecurityInformation;
 867       ULONG POINTER_ALIGNMENT  Length;
 868     } QuerySecurity;
 869     struct {
 870       SECURITY_INFORMATION  SecurityInformation;
 871       PSECURITY_DESCRIPTOR  SecurityDescriptor;
 872     } SetSecurity;
 873     struct {
 874       PVPB  Vpb;
 875       PDEVICE_OBJECT  DeviceObject;
 876     } MountVolume;
 877     struct {
 878       PVPB  Vpb;
 879       PDEVICE_OBJECT  DeviceObject;
 880     } VerifyVolume;
 881     struct {
 882       struct _SCSI_REQUEST_BLOCK  *Srb;
 883     } Scsi;
 884     struct {
 885       DEVICE_RELATION_TYPE  Type;
 886     } QueryDeviceRelations;
 887     struct {
 888       CONST GUID  *InterfaceType;
 889       USHORT  Size;
 890       USHORT  Version;
 891       PINTERFACE  Interface;
 892       PVOID  InterfaceSpecificData;
 893     } QueryInterface;
 894     struct {
 895       PDEVICE_CAPABILITIES  Capabilities;
 896     } DeviceCapabilities;
 897     struct {
 898       PIO_RESOURCE_REQUIREMENTS_LIST  IoResourceRequirementList;
 899     } FilterResourceRequirements;
 900     struct {
 901       ULONG  WhichSpace;
 902       PVOID  Buffer;
 903       ULONG  Offset;
 904       ULONG POINTER_ALIGNMENT  Length;
 905     } ReadWriteConfig;
 906     struct {
 907       BOOLEAN  Lock;
 908     } SetLock;
 909     struct {
 910       BUS_QUERY_ID_TYPE  IdType;
 911     } QueryId;
 912     struct {
 913       DEVICE_TEXT_TYPE  DeviceTextType;
 914       LCID POINTER_ALIGNMENT  LocaleId;
 915     } QueryDeviceText;
 916     struct {
 917       BOOLEAN  InPath;
 918       BOOLEAN  Reserved[3];
 919       DEVICE_USAGE_NOTIFICATION_TYPE POINTER_ALIGNMENT  Type;
 920     } UsageNotification;
 921     struct {
 922       SYSTEM_POWER_STATE  PowerState;
 923     } WaitWake;
 924     struct {
 925       PPOWER_SEQUENCE  PowerSequence;
 926     } PowerSequence;
 927     struct {
 928       ULONG  SystemContext;
 929       POWER_STATE_TYPE POINTER_ALIGNMENT  Type;
 930       POWER_STATE POINTER_ALIGNMENT  State;
 931       POWER_ACTION POINTER_ALIGNMENT  ShutdownType;
 932     } Power;
 933     struct {
 934       PCM_RESOURCE_LIST  AllocatedResources;
 935       PCM_RESOURCE_LIST  AllocatedResourcesTranslated;
 936     } StartDevice;
 937     struct {
 938       ULONG_PTR  ProviderId;
 939       PVOID  DataPath;
 940       ULONG  BufferSize;
 941       PVOID  Buffer;
 942     } WMI;
 943     struct {
 944       PVOID  Argument1;
 945       PVOID  Argument2;
 946       PVOID  Argument3;
 947       PVOID  Argument4;
 948     } Others;
 949   } Parameters;
 950   PDEVICE_OBJECT  DeviceObject;
 951   PFILE_OBJECT  FileObject;
 952   PIO_COMPLETION_ROUTINE  CompletionRoutine;
 953   PVOID  Context;
 954 } IO_STACK_LOCATION, *PIO_STACK_LOCATION;
 955 #include <poppack.h>
 956
 957 typedef struct _MDL {
 958   struct _MDL  *Next;
 959   CSHORT  Size;
 960   CSHORT  MdlFlags;
 961   struct _EPROCESS  *Process;
 962   PVOID  MappedSystemVa;
 963   PVOID  StartVa;
 964   ULONG  ByteCount;
 965   ULONG  ByteOffset;
 966 } MDL, *PMDL;
 967
 968 typedef struct _KTIMER {
 969     DISPATCHER_HEADER Header;
 970     ULARGE_INTEGER DueTime;
 971     LIST_ENTRY TimerListEntry;
 972     struct _KDPC *Dpc;
 973     LONG Period;
 974 } KTIMER, *PKTIMER;
 975
 976 typedef struct _KSYSTEM_TIME {
 977     ULONG LowPart;
 978     LONG High1Time;
 979     LONG High2Time;
 980 } KSYSTEM_TIME, *PKSYSTEM_TIME;
 981
 982 typedef enum _NT_PRODUCT_TYPE {
 983     NtProductWinNt = 1,
 984     NtProductLanManNt,
 985     NtProductServer
 986 } NT_PRODUCT_TYPE, *PNT_PRODUCT_TYPE;
 987
 988 #define PROCESSOR_FEATURE_MAX 64
 989
 990 typedef enum _ALTERNATIVE_ARCHITECTURE_TYPE
 991 {
 992    StandardDesign,
 993    NEC98x86,
 994    EndAlternatives
 995 } ALTERNATIVE_ARCHITECTURE_TYPE;
 996
 997 #define NX_SUPPORT_POLICY_ALWAYSOFF     0
 998 #define NX_SUPPORT_POLICY_ALWAYSON      1
 999 #define NX_SUPPORT_POLICY_OPTIN         2
1000 #define NX_SUPPORT_POLICY_OPTOUT        3
1001
1002 #define MAX_WOW64_SHARED_ENTRIES 16
1003
1004 typedef struct _KUSER_SHARED_DATA {
1005     ULONG TickCountLowDeprecated;
1006     ULONG TickCountMultiplier;
1007     volatile KSYSTEM_TIME InterruptTime;
1008     volatile KSYSTEM_TIME SystemTime;
1009     volatile KSYSTEM_TIME TimeZoneBias;
1010     USHORT ImageNumberLow;
1011     USHORT ImageNumberHigh;
1012     WCHAR NtSystemRoot[260];
1013     ULONG MaxStackTraceDepth;
1014     ULONG CryptoExponent;
1015     ULONG TimeZoneId;
1016     ULONG LargePageMinimum;
1017     ULONG Reserved2[7];
1018     NT_PRODUCT_TYPE NtProductType;
1019     BOOLEAN ProductTypeIsValid;
1020     ULONG NtMajorVersion;
1021     ULONG NtMinorVersion;
1022     BOOLEAN ProcessorFeatures[PROCESSOR_FEATURE_MAX];
1023     ULONG Reserved1;
1024     ULONG Reserved3;
1025     volatile ULONG TimeSlip;
1026     ALTERNATIVE_ARCHITECTURE_TYPE AlternativeArchitecture;
1027     LARGE_INTEGER SystemExpirationDate;
1028     ULONG SuiteMask;
1029     BOOLEAN KdDebuggerEnabled;
1030     UCHAR NXSupportPolicy;
1031     volatile ULONG ActiveConsoleId;
1032     volatile ULONG DismountCount;
1033     ULONG ComPlusPackage;
1034     ULONG LastSystemRITEventTickCount;
1035     ULONG NumberOfPhysicalPages;
1036     BOOLEAN SafeBootMode;
1037     ULONG TraceLogging;
1038     ULONGLONG TestRetInstruction;
1039     ULONG SystemCall;
1040     ULONG SystemCallReturn;
1041     ULONGLONG SystemCallPad[3];
1042     union {
1043         volatile KSYSTEM_TIME TickCount;
1044         volatile ULONG64 TickCountQuad;
1045     } DUMMYUNIONNAME;
1046     ULONG Cookie;
1047     ULONG Wow64SharedInformation[MAX_WOW64_SHARED_ENTRIES];
1048 } KSHARED_USER_DATA, *PKSHARED_USER_DATA;
1049
1050 typedef enum _MEMORY_CACHING_TYPE {
1051   MmNonCached = 0,
1052   MmCached = 1,
1053   MmWriteCombined = 2,
1054   MmHardwareCoherentCached = 3,
1055   MmNonCachedUnordered = 4,
1056   MmUSWCCached = 5,
1057   MmMaximumCacheType = 6
1058 } MEMORY_CACHING_TYPE;
1059
1060 typedef enum _MM_SYSTEM_SIZE
1061 {
1062     MmSmallSystem,
1063     MmMediumSystem,
1064     MmLargeSystem
1065 } MM_SYSTEMSIZE;
1066
1067 NTSTATUS WINAPI ObCloseHandle(IN HANDLE handle);
1068
1069 #ifdef NONAMELESSUNION
1070 # ifdef NONAMELESSSTRUCT
1071 #  define IoGetCurrentIrpStackLocation(_Irp) ((_Irp)->Tail.Overlay.s.u2.CurrentStackLocation)
1072 #  define IoGetNextIrpStackLocation(_Irp) ((_Irp)->Tail.Overlay.s.u2.CurrentStackLocation - 1)
1073 # else
1074 #  define IoGetCurrentIrpStackLocation(_Irp) ((_Irp)->Tail.Overlay.u2.CurrentStackLocation)
1075 #  define IoGetNextIrpStackLocation(_Irp) ((_Irp)->Tail.Overlay.u2.CurrentStackLocation - 1)
1076 # endif
1077 #else
1078 # ifdef NONAMELESSSTRUCT
1079 #  define IoGetCurrentIrpStackLocation(_Irp) ((_Irp)->Tail.Overlay.s.CurrentStackLocation)
1080 #  define IoGetNextIrpStackLocation(_Irp) ((_Irp)->Tail.Overlay.s.CurrentStackLocation - 1)
1081 # else
1082 #  define IoGetCurrentIrpStackLocation(_Irp) ((_Irp)->Tail.Overlay.CurrentStackLocation)
1083 #  define IoGetNextIrpStackLocation(_Irp) ((_Irp)->Tail.Overlay.CurrentStackLocation - 1)
1084 # endif
1085 #endif
1086
1087 #define KernelMode 0
1088 #define UserMode   1
1089
1090 /* directory object access rights */
1091 #define DIRECTORY_QUERY                 0x0001
1092 #define DIRECTORY_TRAVERSE              0x0002
1093 #define DIRECTORY_CREATE_OBJECT         0x0004
1094 #define DIRECTORY_CREATE_SUBDIRECTORY   0x0008
1095 #define DIRECTORY_ALL_ACCESS            (STANDARD_RIGHTS_REQUIRED | 0xF)
1096
1097 /* symbolic link access rights */
1098 #define SYMBOLIC_LINK_QUERY             0x0001
1099 #define SYMBOLIC_LINK_ALL_ACCESS        (STANDARD_RIGHTS_REQUIRED | 0x1)
1100
1101 PVOID     WINAPI ExAllocatePool(POOL_TYPE,SIZE_T);
1102 PVOID     WINAPI ExAllocatePoolWithQuota(POOL_TYPE,SIZE_T);
1103 PVOID     WINAPI ExAllocatePoolWithTag(POOL_TYPE,SIZE_T,ULONG);
1104 PVOID     WINAPI ExAllocatePoolWithQuotaTag(POOL_TYPE,SIZE_T,ULONG);
1105 void      WINAPI ExFreePool(PVOID);
1106 void      WINAPI ExFreePoolWithTag(PVOID,ULONG);
1107
1108 NTSTATUS  WINAPI IoAllocateDriverObjectExtension(PDRIVER_OBJECT,PVOID,ULONG,PVOID*);
1109 PVOID     WINAPI IoAllocateErrorLogEntry(PVOID,UCHAR);
1110 PIRP      WINAPI IoAllocateIrp(CCHAR,BOOLEAN);
1111 NTSTATUS  WINAPI IoCallDriver(DEVICE_OBJECT*,IRP*);
1112 VOID      WINAPI IoCompleteRequest(IRP*,UCHAR);
1113 NTSTATUS  WINAPI IoCreateDevice(DRIVER_OBJECT*,ULONG,UNICODE_STRING*,DEVICE_TYPE,ULONG,BOOLEAN,DEVICE_OBJECT**);
1114 NTSTATUS  WINAPI IoCreateDriver(UNICODE_STRING*,PDRIVER_INITIALIZE);
1115 NTSTATUS  WINAPI IoCreateSymbolicLink(UNICODE_STRING*,UNICODE_STRING*);
1116 void      WINAPI IoDeleteDevice(DEVICE_OBJECT*);
1117 void      WINAPI IoDeleteDriver(DRIVER_OBJECT*);
1118 NTSTATUS  WINAPI IoDeleteSymbolicLink(UNICODE_STRING*);
1119 void      WINAPI IoFreeIrp(IRP*);
1120 PEPROCESS WINAPI IoGetCurrentProcess(void);
1121 NTSTATUS  WINAPI IoGetDeviceInterfaces(CONST GUID*,PDEVICE_OBJECT,ULONG,PWSTR*);
1122 NTSTATUS  WINAPI IoGetDeviceObjectPointer(UNICODE_STRING*,ACCESS_MASK,PFILE_OBJECT*,PDEVICE_OBJECT*);
1123 NTSTATUS  WINAPI IoGetDeviceProperty(PDEVICE_OBJECT,DEVICE_REGISTRY_PROPERTY,ULONG,PVOID,PULONG);
1124 PVOID     WINAPI IoGetDriverObjectExtension(PDRIVER_OBJECT,PVOID);
1125 PDEVICE_OBJECT WINAPI IoGetRelatedDeviceObject(PFILE_OBJECT);
1126 void      WINAPI IoInitializeIrp(IRP*,USHORT,CCHAR);
1127 NTSTATUS  WINAPI IoWMIRegistrationControl(PDEVICE_OBJECT,ULONG);
1128
1129 PKTHREAD  WINAPI KeGetCurrentThread(void);
1130 void      WINAPI KeQuerySystemTime(LARGE_INTEGER*);
1131 void      WINAPI KeQueryTickCount(LARGE_INTEGER*);
1132 ULONG     WINAPI KeQueryTimeIncrement(void);
1133 LONG      WINAPI KeReleaseSemaphore(PRKSEMAPHORE,KPRIORITY,LONG,BOOLEAN);
1134 LONG      WINAPI KeResetEvent(PRKEVENT);
1135 LONG      WINAPI KeSetEvent(PRKEVENT,KPRIORITY,BOOLEAN);
1136 KPRIORITY WINAPI KeSetPriorityThread(PKTHREAD,KPRIORITY);
1137
1138 PVOID     WINAPI MmAllocateContiguousMemory(SIZE_T,PHYSICAL_ADDRESS);
1139 PVOID     WINAPI MmAllocateNonCachedMemory(SIZE_T);
1140 PMDL      WINAPI MmAllocatePagesForMdl(PHYSICAL_ADDRESS,PHYSICAL_ADDRESS,PHYSICAL_ADDRESS,SIZE_T);
1141 void      WINAPI MmFreeNonCachedMemory(PVOID,SIZE_T);
1142 MM_SYSTEMSIZE WINAPI MmQuerySystemSize(void);
1143
1144 NTSTATUS  WINAPI ObReferenceObjectByHandle(HANDLE,ACCESS_MASK,POBJECT_TYPE,KPROCESSOR_MODE,PVOID*,POBJECT_HANDLE_INFORMATION);
1145
1146 POWER_STATE WINAPI PoSetPowerState(PDEVICE_OBJECT,POWER_STATE_TYPE,POWER_STATE);
1147 NTSTATUS  WINAPI PsCreateSystemThread(PHANDLE,ULONG,POBJECT_ATTRIBUTES,HANDLE,PCLIENT_ID,PKSTART_ROUTINE,PVOID);
1148 #define          PsGetCurrentProcess() IoGetCurrentProcess()
1149 #define          PsGetCurrentThread() ((PETHREAD)KeGetCurrentThread())
1150 HANDLE    WINAPI PsGetCurrentProcessId(void);
1151 HANDLE    WINAPI PsGetCurrentThreadId(void);
1152 BOOLEAN   WINAPI PsGetVersion(ULONG*,ULONG*,ULONG*,UNICODE_STRING*);
1153 NTSTATUS  WINAPI PsTerminateSystemThread(NTSTATUS);
1154
1155 NTSTATUS  WINAPI ZwAddBootEntry(PUNICODE_STRING,PUNICODE_STRING);
1156 NTSTATUS  WINAPI ZwAccessCheckAndAuditAlarm(PUNICODE_STRING,HANDLE,PUNICODE_STRING,PUNICODE_STRING,PSECURITY_DESCRIPTOR,ACCESS_MASK,PGENERIC_MAPPING,BOOLEAN,PACCESS_MASK,PBOOLEAN,PBOOLEAN);
1157 NTSTATUS  WINAPI ZwAdjustPrivilegesToken(HANDLE,BOOLEAN,PTOKEN_PRIVILEGES,DWORD,PTOKEN_PRIVILEGES,PDWORD);
1158 NTSTATUS  WINAPI ZwAlertThread(HANDLE ThreadHandle);
1159 NTSTATUS  WINAPI ZwAllocateVirtualMemory(HANDLE,PVOID*,ULONG,SIZE_T*,ULONG,ULONG);
1160 NTSTATUS  WINAPI ZwCancelIoFile(HANDLE,PIO_STATUS_BLOCK);
1161 NTSTATUS  WINAPI ZwCancelTimer(HANDLE, BOOLEAN*);
1162 NTSTATUS  WINAPI ZwClearEvent(HANDLE);
1163 NTSTATUS  WINAPI ZwClose(HANDLE);
1164 NTSTATUS  WINAPI ZwCloseObjectAuditAlarm(PUNICODE_STRING,HANDLE,BOOLEAN);
1165 NTSTATUS  WINAPI ZwConnectPort(PHANDLE,PUNICODE_STRING,PSECURITY_QUALITY_OF_SERVICE,PLPC_SECTION_WRITE,PLPC_SECTION_READ,PULONG,PVOID,PULONG);
1166 NTSTATUS  WINAPI ZwCreateDirectoryObject(PHANDLE,ACCESS_MASK,POBJECT_ATTRIBUTES);
1167 NTSTATUS  WINAPI ZwCreateEvent(PHANDLE,ACCESS_MASK,const OBJECT_ATTRIBUTES *,BOOLEAN,BOOLEAN);
1168 NTSTATUS  WINAPI ZwCreateFile(PHANDLE,ACCESS_MASK,POBJECT_ATTRIBUTES,PIO_STATUS_BLOCK,PLARGE_INTEGER,ULONG,ULONG,ULONG,ULONG,PVOID,ULONG);
1169 NTSTATUS  WINAPI ZwCreateKey(PHANDLE,ACCESS_MASK,const OBJECT_ATTRIBUTES*,ULONG,const UNICODE_STRING*,ULONG,PULONG);
1170 NTSTATUS  WINAPI ZwCreateSection(HANDLE*,ACCESS_MASK,const OBJECT_ATTRIBUTES*,const LARGE_INTEGER*,ULONG,ULONG,HANDLE);
1171 NTSTATUS  WINAPI ZwCreateSymbolicLinkObject(PHANDLE,ACCESS_MASK,POBJECT_ATTRIBUTES,PUNICODE_STRING);
1172 NTSTATUS  WINAPI ZwCreateTimer(HANDLE*, ACCESS_MASK, const OBJECT_ATTRIBUTES*, TIMER_TYPE);
1173 NTSTATUS  WINAPI ZwDeleteAtom(RTL_ATOM);
1174 NTSTATUS  WINAPI ZwDeleteFile(POBJECT_ATTRIBUTES);
1175 NTSTATUS  WINAPI ZwDeleteKey(HANDLE);
1176 NTSTATUS  WINAPI ZwDeleteValueKey(HANDLE,const UNICODE_STRING *);
1177 NTSTATUS  WINAPI ZwDeviceIoControlFile(HANDLE,HANDLE,PIO_APC_ROUTINE,PVOID,PIO_STATUS_BLOCK,ULONG,PVOID,ULONG,PVOID,ULONG);
1178 NTSTATUS  WINAPI ZwDisplayString(PUNICODE_STRING);
1179 NTSTATUS  WINAPI ZwDuplicateObject(HANDLE,HANDLE,HANDLE,PHANDLE,ACCESS_MASK,ULONG,ULONG);
1180 NTSTATUS  WINAPI ZwDuplicateToken(HANDLE,ACCESS_MASK,POBJECT_ATTRIBUTES,SECURITY_IMPERSONATION_LEVEL,TOKEN_TYPE,PHANDLE);
1181 NTSTATUS  WINAPI ZwEnumerateKey(HANDLE,ULONG,KEY_INFORMATION_CLASS,void *,DWORD,DWORD *);
1182 NTSTATUS  WINAPI ZwEnumerateValueKey(HANDLE,ULONG,KEY_VALUE_INFORMATION_CLASS,PVOID,ULONG,PULONG);
1183 NTSTATUS  WINAPI ZwFlushInstructionCache(HANDLE,LPCVOID,SIZE_T);
1184 NTSTATUS  WINAPI ZwFlushKey(HANDLE);
1185 NTSTATUS  WINAPI ZwFlushVirtualMemory(HANDLE,LPCVOID*,SIZE_T*,ULONG);
1186 NTSTATUS  WINAPI ZwFreeVirtualMemory(HANDLE,PVOID*,SIZE_T*,ULONG);
1187 NTSTATUS  WINAPI ZwFsControlFile(HANDLE,HANDLE,PIO_APC_ROUTINE,PVOID,PIO_STATUS_BLOCK,ULONG,PVOID,ULONG,PVOID,ULONG);
1188 NTSTATUS  WINAPI ZwInitiatePowerAction(POWER_ACTION,SYSTEM_POWER_STATE,ULONG,BOOLEAN);
1189 NTSTATUS  WINAPI ZwLoadDriver(const UNICODE_STRING *);
1190 NTSTATUS  WINAPI ZwLoadKey(const OBJECT_ATTRIBUTES *,OBJECT_ATTRIBUTES *);
1191 NTSTATUS  WINAPI ZwLockVirtualMemory(HANDLE,PVOID*,SIZE_T*,ULONG);
1192 NTSTATUS  WINAPI ZwMakeTemporaryObject(HANDLE);
1193 NTSTATUS  WINAPI ZwMapViewOfSection(HANDLE,HANDLE,PVOID*,ULONG,SIZE_T,const LARGE_INTEGER*,SIZE_T*,SECTION_INHERIT,ULONG,ULONG);
1194 NTSTATUS  WINAPI ZwNotifyChangeKey(HANDLE,HANDLE,PIO_APC_ROUTINE,PVOID,PIO_STATUS_BLOCK,ULONG,BOOLEAN,PVOID,ULONG,BOOLEAN);
1195 NTSTATUS  WINAPI ZwOpenDirectoryObject(PHANDLE,ACCESS_MASK,POBJECT_ATTRIBUTES);
1196 NTSTATUS  WINAPI ZwOpenEvent(PHANDLE,ACCESS_MASK,const OBJECT_ATTRIBUTES *);
1197 NTSTATUS  WINAPI ZwOpenFile(PHANDLE,ACCESS_MASK,POBJECT_ATTRIBUTES,PIO_STATUS_BLOCK,ULONG,ULONG);
1198 NTSTATUS  WINAPI ZwOpenKey(PHANDLE,ACCESS_MASK,const OBJECT_ATTRIBUTES *);
1199 NTSTATUS  WINAPI ZwOpenProcess(PHANDLE,ACCESS_MASK,const OBJECT_ATTRIBUTES*,const CLIENT_ID*);
1200 NTSTATUS  WINAPI ZwOpenProcessToken(HANDLE,DWORD,HANDLE *);
1201 NTSTATUS  WINAPI ZwOpenSection(HANDLE*,ACCESS_MASK,const OBJECT_ATTRIBUTES*);
1202 NTSTATUS  WINAPI ZwOpenSymbolicLinkObject(PHANDLE,ACCESS_MASK,POBJECT_ATTRIBUTES);
1203 NTSTATUS  WINAPI ZwOpenThread(HANDLE*,ACCESS_MASK,const OBJECT_ATTRIBUTES*,const CLIENT_ID*);
1204 NTSTATUS  WINAPI ZwOpenThreadToken(HANDLE,DWORD,BOOLEAN,HANDLE *);
1205 NTSTATUS  WINAPI ZwOpenTimer(HANDLE*, ACCESS_MASK, const OBJECT_ATTRIBUTES*);
1206 NTSTATUS  WINAPI ZwPowerInformation(POWER_INFORMATION_LEVEL,PVOID,ULONG,PVOID,ULONG);
1207 NTSTATUS  WINAPI ZwPulseEvent(HANDLE,PULONG);
1208 NTSTATUS  WINAPI ZwQueryDefaultLocale(BOOLEAN,LCID*);
1209 NTSTATUS  WINAPI ZwQueryDefaultUILanguage(LANGID*);
1210 NTSTATUS  WINAPI ZwQueryDirectoryFile(HANDLE,HANDLE,PIO_APC_ROUTINE,PVOID,PIO_STATUS_BLOCK,PVOID,ULONG,FILE_INFORMATION_CLASS,BOOLEAN,PUNICODE_STRING,BOOLEAN);
1211 NTSTATUS  WINAPI ZwQueryDirectoryObject(HANDLE,PDIRECTORY_BASIC_INFORMATION,ULONG,BOOLEAN,BOOLEAN,PULONG,PULONG);
1212 NTSTATUS  WINAPI ZwQueryEaFile(HANDLE,PIO_STATUS_BLOCK,PVOID,ULONG,BOOLEAN,PVOID,ULONG,PVOID,BOOLEAN);
1213 NTSTATUS  WINAPI ZwQueryFullAttributesFile(const OBJECT_ATTRIBUTES*,FILE_NETWORK_OPEN_INFORMATION*);
1214 NTSTATUS  WINAPI ZwQueryInformationFile(HANDLE,PIO_STATUS_BLOCK,PVOID,LONG,FILE_INFORMATION_CLASS);
1215 NTSTATUS  WINAPI ZwQueryInformationThread(HANDLE,THREADINFOCLASS,PVOID,ULONG,PULONG);
1216 NTSTATUS  WINAPI ZwQueryInformationToken(HANDLE,DWORD,PVOID,DWORD,LPDWORD);
1217 NTSTATUS  WINAPI ZwQueryInstallUILanguage(LANGID*);
1218 NTSTATUS  WINAPI ZwQueryKey(HANDLE,KEY_INFORMATION_CLASS,void *,DWORD,DWORD *);
1219 NTSTATUS  WINAPI ZwQueryObject(HANDLE, OBJECT_INFORMATION_CLASS, PVOID, ULONG, PULONG);
1220 NTSTATUS  WINAPI ZwQuerySecurityObject(HANDLE,SECURITY_INFORMATION,PSECURITY_DESCRIPTOR,ULONG,PULONG);
1221 NTSTATUS  WINAPI ZwQuerySection(HANDLE,SECTION_INFORMATION_CLASS,PVOID,ULONG,PULONG);
1222 NTSTATUS  WINAPI ZwQuerySymbolicLinkObject(HANDLE,PUNICODE_STRING,PULONG);
1223 NTSTATUS  WINAPI ZwQuerySystemInformation(SYSTEM_INFORMATION_CLASS,PVOID,ULONG,PULONG);
1224 NTSTATUS  WINAPI ZwQueryTimerResolution(PULONG,PULONG,PULONG);
1225 NTSTATUS  WINAPI ZwQueryValueKey(HANDLE,const UNICODE_STRING *,KEY_VALUE_INFORMATION_CLASS,void *,DWORD,DWORD *);
1226 NTSTATUS  WINAPI ZwQueryVolumeInformationFile(HANDLE,PIO_STATUS_BLOCK,PVOID,ULONG,FS_INFORMATION_CLASS);
1227 NTSTATUS  WINAPI ZwReadFile(HANDLE,HANDLE,PIO_APC_ROUTINE,PVOID,PIO_STATUS_BLOCK,PVOID,ULONG,PLARGE_INTEGER,PULONG);
1228 NTSTATUS  WINAPI ZwReplaceKey(POBJECT_ATTRIBUTES,HANDLE,POBJECT_ATTRIBUTES);
1229 NTSTATUS  WINAPI ZwRequestWaitReplyPort(HANDLE,PLPC_MESSAGE,PLPC_MESSAGE);
1230 NTSTATUS  WINAPI ZwResetEvent(HANDLE,PULONG);
1231 NTSTATUS  WINAPI ZwRestoreKey(HANDLE,HANDLE,ULONG);
1232 NTSTATUS  WINAPI ZwSaveKey(HANDLE,HANDLE);
1233 NTSTATUS  WINAPI ZwSecureConnectPort(PHANDLE,PUNICODE_STRING,PSECURITY_QUALITY_OF_SERVICE,PLPC_SECTION_WRITE,PSID,PLPC_SECTION_READ,PULONG,PVOID,PULONG);
1234 NTSTATUS  WINAPI ZwSetDefaultLocale(BOOLEAN,LCID);
1235 NTSTATUS  WINAPI ZwSetDefaultUILanguage(LANGID);
1236 NTSTATUS  WINAPI ZwSetEaFile(HANDLE,PIO_STATUS_BLOCK,PVOID,ULONG);
1237 NTSTATUS  WINAPI ZwSetEvent(HANDLE,PULONG);
1238 NTSTATUS  WINAPI ZwSetInformationFile(HANDLE,PIO_STATUS_BLOCK,PVOID,ULONG,FILE_INFORMATION_CLASS);
1239 NTSTATUS  WINAPI ZwSetInformationKey(HANDLE,const int,PVOID,ULONG);
1240 NTSTATUS  WINAPI ZwSetInformationObject(HANDLE, OBJECT_INFORMATION_CLASS, PVOID, ULONG);
1241 NTSTATUS  WINAPI ZwSetInformationProcess(HANDLE,PROCESS_INFORMATION_CLASS,PVOID,ULONG);
1242 NTSTATUS  WINAPI ZwSetInformationThread(HANDLE,THREADINFOCLASS,LPCVOID,ULONG);
1243 NTSTATUS  WINAPI ZwSetIoCompletion(HANDLE,ULONG,ULONG,NTSTATUS,ULONG);
1244 NTSTATUS  WINAPI ZwSetSecurityObject(HANDLE,SECURITY_INFORMATION,PSECURITY_DESCRIPTOR);
1245 NTSTATUS  WINAPI ZwSetSystemInformation(SYSTEM_INFORMATION_CLASS,PVOID,ULONG);
1246 NTSTATUS  WINAPI ZwSetSystemTime(const LARGE_INTEGER*,LARGE_INTEGER*);
1247 NTSTATUS  WINAPI ZwSetTimer(HANDLE, const LARGE_INTEGER*, PTIMER_APC_ROUTINE, PVOID, BOOLEAN, ULONG, BOOLEAN*);
1248 NTSTATUS  WINAPI ZwSetValueKey(HANDLE,const UNICODE_STRING *,ULONG,ULONG,const void *,ULONG);
1249 NTSTATUS  WINAPI ZwSetVolumeInformationFile(HANDLE,PIO_STATUS_BLOCK,PVOID,ULONG,FS_INFORMATION_CLASS);
1250 NTSTATUS  WINAPI ZwSuspendThread(HANDLE,PULONG);
1251 NTSTATUS  WINAPI ZwTerminateProcess(HANDLE,LONG);
1252 NTSTATUS  WINAPI ZwUnloadDriver(const UNICODE_STRING *);
1253 NTSTATUS  WINAPI ZwUnloadKey(HANDLE);
1254 NTSTATUS  WINAPI ZwUnmapViewOfSection(HANDLE,PVOID);
1255 NTSTATUS  WINAPI ZwWaitForSingleObject(HANDLE,BOOLEAN,const LARGE_INTEGER*);
1256 NTSTATUS  WINAPI ZwWaitForMultipleObjects(ULONG,const HANDLE*,BOOLEAN,BOOLEAN,const LARGE_INTEGER*);
1257 NTSTATUS  WINAPI ZwWriteFile(HANDLE,HANDLE,PIO_APC_ROUTINE,PVOID,PIO_STATUS_BLOCK,const void*,ULONG,PLARGE_INTEGER,PULONG);
1258 NTSTATUS  WINAPI ZwYieldExecution(void);
1259
1260 #endif