Subversion Repositories Kolibri OS

;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;

;;                                                              ;;

;; Copyright (C) KolibriOS team 2004-2016. All rights reserved. ;;

;;  Distributed under terms of the GNU General Public License.  ;;

;;                                                              ;;

;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;

$Revision: 9953 $

; NTFS external functions

;   in:

; ebx -> parameter structure of sysfunc 70

; ebp -> NTFS structure

; esi -> path string in UTF-8

;   out:

; eax, ebx = return values for sysfunc 70

iglobal

align 4

ntfs_user_functions:

        dd      ntfs_free

        dd      (ntfs_user_functions_end - ntfs_user_functions - 4) / 4

        dd      ntfs_ReadFile

        dd      ntfs_ReadFolder

        dd      ntfs_CreateFile

        dd      ntfs_WriteFile

        dd      ntfs_SetFileEnd

        dd      ntfs_GetFileInfo

        dd      ntfs_SetFileInfo

        dd      0

        dd      ntfs_Delete

        dd      ntfs_CreateFolder

ntfs_user_functions_end:

endg

; Basic concepts:

; File is a FileRecord in the $MFT.

; $MFT is a file, that consists of FileRecords and starts with FileRecord of itself.

; FileRecord (FILE) consists of a header and attributes.

; Attribute consists of a header and a body.

; Attribute's body can be inside (resident) or outside of FileRecord.

; File's data is a body of $Data (80h) attribute.

; FileRecords is a data of the $MFT file.

; Directory is a file, that consists of index nodes.

; Resident index node is always located in a body of $IndexRoot (90h) attribute.

; Body of $IndexAllocation (A0h) attribute is always non resident

;  and consists of IndexRecords.

; IndexRecord (INDX) consists of a header and an index node.

; Index node consists of a header and indexes.

; Index consists of a header and a copy of indexed attribute's body.

; Directories index $Filename (30h) attribute of all existing files.

; $IndexRoot and $IndexAllocation attributes of a directory has a name — $I30.

; Offsets:

    ; record header

magic = 0

updateSequenceOffset = 4

updateSequenceSize = 6

    ; FileRecord header

reuseCounter = 16

hardLinkCounter = 12h

attributeOffset = 14h

recordFlags = 16h

recordRealSize = 18h

recordAllocatedSize = 1ch

baseRecordReference = 20h       ; for auxiliary records

baseRecordReuse = 26h

newAttributeID = 28h

    ; attribute header

attributeType = 0

sizeWithHeader = 4

nonResidentFlag = 8

nameLength = 9

nameOffset = 10

attributeFlags = 12

attributeID = 14

    ; resident attribute header

sizeWithoutHeader = 10h

attributeOffset = 14h

indexedFlag = 16h

    ; non resident attribute header

firstVCN = 10h

lastVCN = 18h

dataRunsOffset = 20h

attributeAllocatedSize = 28h

attributeRealSize = 30h

initialDataSize = 38h

    ; $IndexRoot

indexedAttributesType = 0

collationRule = 4

indexRecordSize = 8

indexRecordSizeClus = 12        ; in sectors if less than one cluster

rootNode = 16

    ; IndexRecord header

recordVCN = 16

recordNode = 18h

    ; node header

indexOffset = 0

nodeRealSize = 4

nodeAllocatedSize = 8

nonLeafFlag = 12

    ; $Filename index

fileRecordReference = 0

fileReferenceReuse = 6

indexAllocatedSize = 8

indexRawSize = 10

indexFlags = 12

directoryRecordReference = 16

directoryReferenceReuse = 16h

fileCreated = 18h

fileModified = 20h

recordModified = 28h

fileAccessed = 30h

fileAllocatedSize = 38h

fileRealSize = 40h

fileFlags = 48h

fileNameLength = 50h

namespace = 51h

fileName = 52h

struct NTFS PARTITION

Lock                MUTEX   ; Currently operations with one partition

; can not be executed in parallel since the legacy code is not ready.

sectors_per_cluster dd  ?

mft_cluster         dd  ?   ; location

mftmirr_cluster     dd  ?   ; location

frs_size            dd  ?   ; in bytes

frs_buffer          dd  ?   ; MFT fileRecord buffer

mft_retrieval_end   dd  ?

mftSize             dd  ?   ; in sectors

cur_index_size      dd  ?   ; in sectors

cur_index_buf       dd  ?   ; index node buffer

secondIndexBuffer   dd  ?

BitmapBuffer        dd  ?

BitmapTotalSize     dd  ?   ; bytes reserved

BitmapSize          dd  ?   ; bytes readen

BitmapLocation      dd  ?   ; starting sector

BitmapStart         dd  ?   ; first byte after area, reserved for MFT

mftBitmapBuffer     dd  ?   ; one cluster

mftBitmapSize       dd  ?   ; bytes readen

mftBitmapLocation   dd  ?   ; starting sector

attr_size           dq  ?

attr_offs           dd  ?

attr_list           dd  ?

attr_iBaseRecord    dd  ?

cur_attr            dd  ?   ; attribute type

cur_iRecord         dd  ?   ; number of fileRecord in MFT

cur_offs            dd  ?   ; attribute VCN in sectors

cur_size            dd  ?   ; max sectors to read

cur_buf             dd  ?

cur_read            dd  ?   ; bytes readen

cur_tail            dd  ?

cur_subnode_size    dd  ?

LastRead            dd  ?   ; last readen block of sectors

mftLastRead         dd  ?

rootLastRead        dd  ?

nodeLastRead        dd  ?

indexRoot           dd  ?

indexPointer        dd  ?

newRecord           dd  ?

fileDataStart       dd  ?   ; starting cluster

fileDataSize        dd  ?   ; in clusters

fileDataBuffer      dd  ?

fileRealSize        dd  ?   ; in bytes

fragmentCount       db  ?

bCanContinue        db  ?

bFolder             db  ?

bWriteAttr          db  ?   ; Warning: Don't forget to turn off!!!

mft_retrieval       rb  512

align0  rb  1024-NTFS.align0

attrlist_buf        rb  1024

attrlist_mft_buf    rb  1024

bitmap_buf          rb  1024

ends

ntfs_test_bootsec:

; in: ebx -> buffer, edx = size of partition

; out: CF=1 -> invalid

; 1. Name=='NTFS    '

        cmp     dword [ebx+3], 'NTFS'

        jnz     .no

        cmp     dword [ebx+7], '    '

        jnz     .no

; 2. Number of bytes per sector is the same as for physical device

; (that is, 0x200 for hard disk)

        cmp     word [ebx+11], 0x200

        jnz     .no

; 3. Number of sectors per cluster must be power of 2

        movzx   eax, byte [ebx+13]

        dec     eax

        js      .no

        test    al, [ebx+13]

        jnz     .no

; 4. FAT parameters must be zero

        cmp     word [ebx+14], 0

        jnz     .no

        cmp     dword [ebx+16], 0

        jnz     .no

        cmp     byte [ebx+20], 0

        jnz     .no

        cmp     word [ebx+22], 0

        jnz     .no

        cmp     dword [ebx+32], 0

        jnz     .no

; 5. Number of sectors <= partition size

        cmp     dword [ebx+0x2C], 0

        ja      .no

        cmp     [ebx+0x28], edx

        ja      .no

; 6. $MFT and $MFTMirr clusters must be within partition

        cmp     dword [ebx+0x34], 0

        ja      .no

        push    edx

        movzx   eax, byte [ebx+13]

        mul     dword [ebx+0x30]

        test    edx, edx

        pop     edx

        jnz     .no

        cmp     eax, edx

        ja      .no

        cmp     dword [ebx+0x3C], 0