azathoth-core 0.1.7

Core OS types for the AzathothC2 project
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74

#![allow(non_snake_case, non_camel_case_types)]

use core::ffi::c_void;
use crate::os::windows::types::{DWORD, HANDLE, LPDWORD, LPVOID};
use super::structs::{IoStatusBlock, LargeInteger, ObjectAttributes};

/// NT NtClose typedef: Closes an object handle.
pub type NtClose_t = unsafe extern "system" fn(handle: *mut c_void) -> i32;

/// NT NtOpenFile typedef: Opens an existing file.
pub type NtOpenFile_t = unsafe extern "system" fn(
    file_handle: *mut *mut c_void,
    desired_access: u32,
    object_attributes: *mut ObjectAttributes,
    io_status_block: *mut IoStatusBlock,
    share_access: u32,
    open_options: u32,
) -> i32;

/// NT NtCreateFile typedef: Creates or opens a file or I/O device.
pub type NtCreateFile_t = unsafe extern "system" fn(
    file_handle: *mut *mut c_void,
    desired_access: u32,
    object_attributes: *mut ObjectAttributes,
    io_status_block: *mut IoStatusBlock,
    allocation_size: *mut LargeInteger,
    file_attributes: u32,
    share_access: u32,
    create_disposition: u32,
    create_options: u32,
    ea_buffer: *mut c_void,
    ea_length: u32,
) -> i32;

/// NT NtCreateNamedPipeFile typedef: Creates a named pipe and returns a handle to it.
pub type NtCreateNamedPipeFile_t = unsafe extern "system" fn(
    file_handle: *mut *mut c_void,
    desired_access: u32,
    object_attributes: *mut ObjectAttributes,
    io_status_block: *mut IoStatusBlock,
    share_access: u32,
    create_disposition: u32,
    create_options: u32,
    named_pipe_type: u32,
    read_mode: u32,
    completion_mode: u32,
    max_instances: u32,
    in_buffer_size: u32,
    out_buffer_size: u32,
    default_timeout: *mut LargeInteger,
) -> i32;

/// NT NtReadFile typedef: Reads data from a file or I/O device.
pub type NtReadFile_t = unsafe extern "system" fn(
    file_handle: *mut c_void,
    event: *mut c_void,
    apc_routine: *mut c_void,
    apc_context: *mut c_void,
    io_status_block: *mut IoStatusBlock,
    buffer: *mut u8,
    length: u32,
    byte_offset: *mut LargeInteger,
    key: *mut u32,
) -> i32;

/// Windows ReadFile typedef:
/// <https://learn.microsoft.com/en-us/windows/win32/api/fileapi/nf-fileapi-readfile>
pub type ReadFile_t = unsafe extern "system" fn(
    hFile: HANDLE,
    lpBuffer: LPVOID,
    nNumberOfBytesToRead: DWORD,
    lpNumberOfBytesRead: LPDWORD,
    lpOverlapped: *mut c_void,
) -> i32;