libintrovirt v0.57.4
IntroVirt introspection library
Loading...
Searching...
No Matches
NtCreateFile.hh
Go to the documentation of this file.
1/*
2 * Copyright 2021 Assured Information Security, Inc.
3 *
4 * Licensed under the Apache License, Version 2.0 (the "License");
5 * you may not use this file except in compliance with the License.
6 * You may obtain a copy of the License at
7 *
8 * http://www.apache.org/licenses/LICENSE-2.0
9 *
10 * Unless required by applicable law or agreed to in writing, software
11 * distributed under the License is distributed on an "AS IS" BASIS,
12 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13 * See the License for the specific language governing permissions and
14 * limitations under the License.
15 */
16
17/* This file is automatically generated. Do not edit. */
18#pragma once
19
20#include "NtSystemCall.hh"
22
30
31#include <memory>
32
33namespace introvirt {
34namespace windows {
35namespace nt {
36
40class NtCreateFile : public NtSystemCall {
41 public:
42 /* Direct parameter getters */
43
49 virtual guest_ptr<void> FileHandlePtr() const = 0;
55 virtual FILE_ACCESS_MASK DesiredAccess() const = 0;
67 virtual guest_ptr<void> IoStatusBlockPtr() const = 0;
79 virtual FILE_ATTRIBUTES FileAttributes() const = 0;
85 virtual FILE_SHARE_ACCESS ShareAccess() const = 0;
97 virtual FileCreateOptions CreateOptions() const = 0;
103 virtual guest_ptr<void> EaBufferPtr() const = 0;
109 virtual uint32_t EaLength() const = 0;
110
111 /* Direct parameter setters */
112
118 virtual void FileHandlePtr(const guest_ptr<void>& pFileHandle) = 0;
130 virtual void ObjectAttributesPtr(const guest_ptr<void>& pObjectAttributes) = 0;
136 virtual void IoStatusBlockPtr(const guest_ptr<void>& pIoStatusBlock) = 0;
142 virtual void AllocationSizePtr(const guest_ptr<void>& pAllocationSize) = 0;
172 virtual void EaBufferPtr(const guest_ptr<void>& pEaBuffer) = 0;
178 virtual void EaLength(uint32_t EaLength) = 0;
179
180 /* Helper methods */
181 virtual uint64_t FileHandle() const = 0;
182 virtual void FileHandle(uint64_t FileHandle) = 0;
183 virtual const OBJECT_ATTRIBUTES* ObjectAttributes() const = 0;
185 virtual const IO_STATUS_BLOCK* IoStatusBlock() const = 0;
187 virtual int64_t AllocationSize() const = 0;
188 virtual void AllocationSize(int64_t AllocationSize) = 0;
192 virtual IO_STATUS_RESULT IoStatusResult() const = 0;
193
198
199 /*
200 * System call injection support. You probably want to use inject::system_call<NtCreateFile>.
201 */
203 const guest_ptr<void>& pObjectAttributes,
204 const guest_ptr<void>& pIoStatusBlock, const int64_t* AllocationSize,
207 const guest_ptr<void>& pEaBuffer, uint32_t EaLength);
208};
209
210} /* namespace nt */
211} /* namespace windows */
212} /* namespace introvirt */
Definition guest_ptr.hh:88
ACCESS_MASK class for file permissions.
Definition FILE_ACCESS_MASK.hh:99
Definition FILE_ATTRIBUTES.hh:46
Definition FILE_SHARE_ACCESS.hh:31
Definition FileCreateOptions.hh:51
Definition IO_STATUS_BLOCK.hh:31
Status codes returned by Windows NT system calls.
Definition NTSTATUS.hh:34
Handler class for the NtCreateFile system call.
Definition NtCreateFile.hh:40
virtual IO_STATUS_BLOCK * IoStatusBlock()=0
virtual guest_ptr< void > FileHandlePtr() const =0
Getter for FileHandlePtr.
virtual int64_t AllocationSize() const =0
virtual const OBJECT_ATTRIBUTES * ObjectAttributes() const =0
virtual void FileHandle(uint64_t FileHandle)=0
virtual void EaBufferPtr(const guest_ptr< void > &pEaBuffer)=0
Setter for EaBufferPtr.
virtual void IoStatusResult(IO_STATUS_RESULT IoStatusResult)=0
Sets the IoStatusResult field in the IoStatusBlock.
virtual void FileHandlePtr(const guest_ptr< void > &pFileHandle)=0
Setter for FileHandlePtr.
virtual FileCreateOptions CreateOptions() const =0
Getter for CreateOptions.
virtual void ShareAccess(FILE_SHARE_ACCESS ShareAccess)=0
Setter for ShareAccess.
virtual void AllocationSizePtr(const guest_ptr< void > &pAllocationSize)=0
Setter for AllocationSizePtr.
virtual OBJECT_ATTRIBUTES * ObjectAttributes()=0
virtual void CreateDisposition(CreateFileDisposition CreateDisposition)=0
Setter for CreateDisposition.
virtual void IoStatusBlockPtr(const guest_ptr< void > &pIoStatusBlock)=0
Setter for IoStatusBlockPtr.
virtual const IO_STATUS_BLOCK * IoStatusBlock() const =0
virtual void ObjectAttributesPtr(const guest_ptr< void > &pObjectAttributes)=0
Setter for ObjectAttributesPtr.
virtual CreateFileDisposition CreateDisposition() const =0
Getter for CreateDisposition.
virtual IO_STATUS_RESULT IoStatusResult() const =0
virtual guest_ptr< void > IoStatusBlockPtr() const =0
Getter for IoStatusBlockPtr.
virtual FILE_ACCESS_MASK DesiredAccess() const =0
Getter for DesiredAccess.
virtual void AllocationSize(int64_t AllocationSize)=0
virtual FILE_ATTRIBUTES FileAttributes() const =0
Getter for FileAttributes.
virtual guest_ptr< void > ObjectAttributesPtr() const =0
Getter for ObjectAttributesPtr.
virtual uint32_t EaLength() const =0
Getter for EaLength.
static NTSTATUS inject(uint64_t &FileHandle, FILE_ACCESS_MASK DesiredAccess, const guest_ptr< void > &pObjectAttributes, const guest_ptr< void > &pIoStatusBlock, const int64_t *AllocationSize, FILE_ATTRIBUTES FileAttributes, FILE_SHARE_ACCESS ShareAccess, CreateFileDisposition CreateDisposition, FileCreateOptions CreateOptions, const guest_ptr< void > &pEaBuffer, uint32_t EaLength)
virtual guest_ptr< void > AllocationSizePtr() const =0
Getter for AllocationSizePtr.
virtual void DesiredAccess(FILE_ACCESS_MASK DesiredAccess)=0
Setter for DesiredAccess.
virtual void EaLength(uint32_t EaLength)=0
Setter for EaLength.
virtual void CreateOptions(FileCreateOptions CreateOptions)=0
Setter for CreateOptions.
virtual uint64_t FileHandle() const =0
virtual void FileAttributes(FILE_ATTRIBUTES FileAttributes)=0
Setter for FileAttributes.
virtual guest_ptr< void > EaBufferPtr() const =0
Getter for EaBufferPtr.
virtual FILE_SHARE_ACCESS ShareAccess() const =0
Getter for ShareAccess.
Base type for NT system calls.
Definition NtSystemCall.hh:29
Definition OBJECT_ATTRIBUTES.hh:38
IO_STATUS_RESULT
Definition IO_STATUS_RESULT.hh:24
CreateFileDisposition
Definition CreateFileDisposition.hh:24
Core IntroVirt classes.
Definition Cr0.hh:20