1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
|
/********************************************************/
/* ntapi: Native API core library */
/* Copyright (C) 2013,2014,2015 Z. Gilboa */
/* Released under GPLv2 and GPLv3; see COPYING.NTAPI. */
/********************************************************/
#include <psxtypes/psxtypes.h>
#include <ntapi/nt_object.h>
#include <ntapi/nt_file.h>
#include <ntapi/nt_socket.h>
#include <ntapi/ntapi.h>
#include "ntapi_impl.h"
typedef struct _nt_afd_socket_ea {
uint32_t next_entry_offset;
unsigned char ea_flags;
unsigned char ea_name_length;
uint16_t ea_value_length;
char afd_open_packet[0x10];
uint32_t value_1st;
uint32_t value_2nd;
uint32_t device_name_length;
wchar16_t device_name[0x0b];
uint32_t ea_ext[4];
} nt_afd_socket_ea;
int32_t __cdecl __ntapi_sc_socket_v1(
__out nt_socket * hssocket,
__in uint16_t domain,
__in uint16_t type,
__in uint32_t protocol,
__in uint32_t desired_access __optional,
__in nt_sqos * sqos __optional,
__out nt_io_status_block * iosb __optional)
{
int32_t status;
nt_object_attributes oa;
nt_io_status_block siosb;
nt_sqos ssqos;
nt_unicode_string nt_afdep;
uint32_t ea_length;
void * _hsocket;
wchar16_t afd_end_point[] = {
'\\','D','e','v','i','c','e',
'\\','A','f','d',
'\\','E','n','d','P','o','i','n','t',
0};
/* tcp as default extended attribute */
nt_afd_socket_ea afd_ea = {
0,
0,
0x0f,
0x28,
{'A','f','d','O','p','e','n','P','a','c','k','e','t','X','X',0},
0,0,
0x16,
{'\\','D','e','v','i','c','e','\\','T','c','p'},
{0}};
ea_length = 0x43;
__ntapi->rtl_init_unicode_string(&nt_afdep,afd_end_point);
if (!desired_access)
desired_access = NT_GENERIC_READ \
| NT_GENERIC_WRITE \
| NT_SEC_SYNCHRONIZE \
| NT_SEC_WRITE_DAC;
if (!sqos) {
ssqos.length = sizeof(ssqos);
ssqos.impersonation_level = NT_SECURITY_IMPERSONATION;
ssqos.context_tracking_mode = NT_SECURITY_TRACKING_DYNAMIC;
ssqos.effective_only = 1;
sqos = &ssqos;
}
oa.len = sizeof(oa);
oa.root_dir = (void *)0;
oa.obj_name = &nt_afdep;
oa.obj_attr = NT_OBJ_CASE_INSENSITIVE | NT_OBJ_INHERIT;
oa.sec_desc = (nt_security_descriptor *)0;
oa.sec_qos = sqos;
iosb = iosb ? iosb : &siosb;
if ((status = __ntapi->zw_create_file(
&_hsocket,
desired_access,
&oa,
iosb,
0,
0,
NT_FILE_SHARE_READ | NT_FILE_SHARE_WRITE,
NT_FILE_OPEN_IF,
0,
&afd_ea,
ea_length)))
return status;
oa.obj_name = 0;
oa.obj_attr = 0;
if (status == NT_STATUS_SUCCESS) {
hssocket->hsocket = _hsocket;
hssocket->ntflags = 0;
hssocket->domain = domain;
hssocket->type = type;
hssocket->protocol = protocol;
hssocket->timeout.quad = 0;
hssocket->iostatus = NT_STATUS_SUCCESS;
hssocket->waitstatus = NT_STATUS_SUCCESS;
}
return status;
}
|
