ntobjfs.cpp File Reference

#include <precomp.h>
#include "ntobjfs.h"
#include "regfs.h"

Include dependency graph for ntobjfs.cpp:

Go to the source code of this file.

Classes
struct	NTDLL
struct	UnicodeString

Macros
#define	CONSTRUCT_NTDLLFCT(x)   x(TEXT("NTDLL"), #x)

Typedefs
typedef DWORD(__stdcall *	NTOBJECTOPENFUNCTIONS) (HANDLE *, DWORD, OpenStruct *)

Functions
static DWORD	NtOpenObject (OBJECT_TYPE type, HANDLE *phandle, DWORD access, LPCWSTR path)

Variables
NTDLL *	g_NTDLL = NULL

Macro Definition Documentation

CONSTRUCT_NTDLLFCT

#define CONSTRUCT_NTDLLFCT

(

x

)

x(TEXT("NTDLL"), #x)

Definition at line 36 of file ntobjfs.cpp.

Typedef Documentation

NTOBJECTOPENFUNCTIONS

typedef DWORD(__stdcall * NTOBJECTOPENFUNCTIONS) (HANDLE *, DWORD, OpenStruct *)

Definition at line 38 of file ntobjfs.cpp.

Function Documentation

NtOpenObject()

static DWORD NtOpenObject ( OBJECT_TYPE  type, HANDLE *  phandle, DWORD  access, LPCWSTR  path  )

static

Definition at line 151 of file ntobjfs.cpp.

{
    UnicodeString ustr(path);
    OpenStruct open_struct = {sizeof(OpenStruct), 0x00, &ustr, 0x40};
 
    if (type==DIRECTORY_OBJECT || type==SYMBOLICLINK_OBJECT)
        access |= FILE_LIST_DIRECTORY;
 
    /* if (xflag)
        access |= GENERIC_READ; */
 
    DWORD ioStatusBlock[2]; // IO_STATUS_BLOCK
 
    if (type>=DIRECTORY_OBJECT && type<=IOCOMPLETITION_OBJECT)
        return g_NTDLL->_ObjectOpenFunctions[type](phandle, access|STANDARD_RIGHTS_READ, &open_struct);
    else if (type == FILE_OBJECT)
        return (*g_NTDLL->NtOpenFile)(phandle, access, &open_struct, ioStatusBlock, FILE_SHARE_READ|FILE_SHARE_WRITE|FILE_SHARE_DELETE, 0/*OpenOptions*/);
    else
        return ERROR_INVALID_FUNCTION;
}

Variable Documentation

g_NTDLL

NTDLL* g_NTDLL = NULL

Definition at line 132 of file ntobjfs.cpp.

Referenced by NtOpenObject(), NtObjDirectory::read_directory(), and UnicodeString::UnicodeString().