libintrovirt v0.57.4
IntroVirt introspection library
Loading...
Searching...
No Matches
NtQueryDirectoryFile.hh
Go to the documentation of this file.
1/*
2 * Copyright 2021 Assured Information Security, Inc.
3 *
4 * Licensed under the Apache License, Version 2.0 (the "License");
5 * you may not use this file except in compliance with the License.
6 * You may obtain a copy of the License at
7 *
8 * http://www.apache.org/licenses/LICENSE-2.0
9 *
10 * Unless required by applicable law or agreed to in writing, software
11 * distributed under the License is distributed on an "AS IS" BASIS,
12 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13 * See the License for the specific language governing permissions and
14 * limitations under the License.
15 */
16
17/* This file is automatically generated. Do not edit. */
18#pragma once
19
21
22#include <memory>
23
24namespace introvirt {
25namespace windows {
26namespace nt {
27
32 public:
33 /* Direct parameter getters */
34
40 virtual bool ReturnSingleEntry() const = 0;
46 virtual bool RestartScan() const = 0;
47
48 /* Direct parameter setters */
49
55 virtual void ReturnSingleEntry(bool ReturnSingleEntry) = 0;
61 virtual void RestartScan(bool RestartScan) = 0;
62
63 /*
64 * System call injection support. You probably want to use
65 * inject::system_call<NtQueryDirectoryFile>.
66 */
67 static NTSTATUS inject(uint64_t FileHandle, uint64_t Event, const guest_ptr<void>& pApcRoutine,
68 const guest_ptr<void>& pApcContext,
69 const guest_ptr<void>& pIoStatusBlock,
70 const guest_ptr<void>& pFileInformation, uint32_t FileInformationLength,
73};
74
75} /* namespace nt */
76} /* namespace windows */
77} /* namespace introvirt */
Interface class for hypervisor events.
Definition Event.hh:43
Definition guest_ptr.hh:88
Status codes returned by Windows NT system calls.
Definition NTSTATUS.hh:34
Handler class for the NtQueryDirectoryFileBase system call.
Definition NtQueryDirectoryFileBase.hh:35
virtual uint32_t FileInformationLength() const =0
Getter for FileInformationLength.
virtual FILE_INFORMATION_CLASS FileInformationClass() const =0
Getter for FileInformationClass.
virtual uint64_t FileHandle() const =0
Getter for FileHandle.
virtual const UNICODE_STRING * FileName() const =0
Handler class for the NtQueryDirectoryFile system call.
Definition NtQueryDirectoryFile.hh:31
virtual void RestartScan(bool RestartScan)=0
Setter for RestartScan.
virtual bool RestartScan() const =0
Getter for RestartScan.
virtual bool ReturnSingleEntry() const =0
Getter for ReturnSingleEntry.
static NTSTATUS inject(uint64_t FileHandle, uint64_t Event, const guest_ptr< void > &pApcRoutine, const guest_ptr< void > &pApcContext, const guest_ptr< void > &pIoStatusBlock, const guest_ptr< void > &pFileInformation, uint32_t FileInformationLength, FILE_INFORMATION_CLASS FileInformationClass, bool ReturnSingleEntry, const UNICODE_STRING *FileName, bool RestartScan)
virtual void ReturnSingleEntry(bool ReturnSingleEntry)=0
Setter for ReturnSingleEntry.
Class for the Windows UNICODE_STRING structure.
Definition UNICODE_STRING.hh:37
FILE_INFORMATION_CLASS
Definition FILE_INFORMATION_CLASS.hh:24
Core IntroVirt classes.
Definition Cr0.hh:20