public static extern uint NtOpenFile
(ref IntPtr FileHandle,
Win32FileAccess DesiredAccess,
IntPtr ObjectAttributes_ptr,
ref IO_STATUS_BLOCK IoStatusBlock,
ulong ShareAccess,
ulong OpenOptions);
public InternalEnumerator(IntPtr file_handle, IntPtr buffer, int buffer_size)
{
file_h = file_handle;
if (buffer_size == 0)
{
buffer_size = STREAM_INFO_BUFFER_LEN;
}
if (buffer == IntPtr.Zero)
{
need_free_buffer_h = true;
buffer = Marshal.AllocHGlobal(buffer_size);
}
buffer_h = buffer;
Marshal.WriteInt32(buffer, 4, 0);
IO_STATUS_BLOCK status = new IO_STATUS_BLOCK();
uint res = ntApiFS.NtQueryInformationFile
(file_h,
ref status,
buffer_h,
buffer_size,
FILE_INFORMATION_CLASS.FileStreamInformation);
//check result
NTSTATUS_helper.ThrowOnError(res, status, NTSTATUS_severity.Warning);
}
public static FILE_FS_DEVICE_INFORMATION GetFileVolumeDeviceInfo(IntPtr file_handle)
{
IO_STATUS_BLOCK status = new IO_STATUS_BLOCK();
IntPtr ret_buffer = IntPtr.Zero;
try
{
int ret_buffer_len = Marshal.SizeOf(typeof(FILE_FS_DEVICE_INFORMATION));
ret_buffer = Marshal.AllocHGlobal(ret_buffer_len);
uint res = ntApiFS.NtQueryVolumeInformationFile
(file_handle,
ref status,
ret_buffer,
ret_buffer_len,
FS_INFORMATION_CLASS.FileFsDeviceInformation);
NTSTATUS_helper.ThrowOnError(res, status, NTSTATUS_severity.Warning);
FILE_FS_DEVICE_INFORMATION ret = (FILE_FS_DEVICE_INFORMATION)Marshal.PtrToStructure
(ret_buffer,
typeof(FILE_FS_DEVICE_INFORMATION));
return(ret);
}
finally
{
if (ret_buffer != IntPtr.Zero)
{
Marshal.FreeHGlobal(ret_buffer);
}
}
}
public static NT_FILE_STANDARD_INFORMATION GetFileInfo_standard(IntPtr file_handle)
{
IntPtr ret_ptr = IntPtr.Zero;
try
{
IO_STATUS_BLOCK status_block = new IO_STATUS_BLOCK();
int ret_len = Marshal.SizeOf(typeof(NT_FILE_STANDARD_INFORMATION));
ret_ptr = Marshal.AllocHGlobal(ret_len);
uint res = ntApiFS.NtQueryInformationFile
(file_handle,
ref status_block,
ret_ptr,
ret_len,
FILE_INFORMATION_CLASS.FileStandardInformation);
NTSTATUS_helper.ThrowOnError(res, status_block, NTSTATUS_severity.Warning);
NT_FILE_STANDARD_INFORMATION ret = (NT_FILE_STANDARD_INFORMATION)Marshal.PtrToStructure
(ret_ptr,
typeof(NT_FILE_STANDARD_INFORMATION));
return(ret);
}
finally
{
if (ret_ptr != IntPtr.Zero)
{
Marshal.FreeHGlobal(ret_ptr);
}
}
}
public static FILE_FS_VOLUME_INFORMATION GetFileVolumeInfo(IntPtr file_handle)
{
IO_STATUS_BLOCK status = new IO_STATUS_BLOCK();
IntPtr ret_buffer = IntPtr.Zero;
try
{
int ret_buffer_len = VOLUME_INFO_BUFFER_LEN;
ret_buffer = Marshal.AllocHGlobal(ret_buffer_len);
uint res = ntApiFS.NtQueryVolumeInformationFile
(file_handle,
ref status,
ret_buffer,
ret_buffer_len,
FS_INFORMATION_CLASS.FileFsVolumeInformation);
NTSTATUS_helper.ThrowOnError(res, status, NTSTATUS_severity.Warning);
FILE_FS_VOLUME_INFORMATION ret = FILE_FS_VOLUME_INFORMATION.FromBuffer(ret_buffer);
return(ret);
}
finally
{
if (ret_buffer != IntPtr.Zero)
{
Marshal.FreeHGlobal(ret_buffer);
}
}
}
/// <summary>
/// currently BUGGY - not use, use CreateFile instead
/// </summary>
/// <param name="file_name"></param>
/// <param name="file_access"></param>
/// <param name="file_share"></param>
/// <param name="options"></param>
/// <returns></returns>
public static IntPtr CreateFileHandle
(string file_name,
Win32FileAccess file_access,
FileShare file_share,
CreateFileOptions options)
{
IntPtr ret = IntPtr.Zero;
IntPtr obj_attr_ptr = IntPtr.Zero;
IntPtr file_name_struct_ptr = IntPtr.Zero;
OBJECT_ATTRIBUTES obj_attr = new OBJECT_ATTRIBUTES();
try
{
//выделяем память под OBJECT_ATTRIBUTES
int obj_attr_len = Marshal.SizeOf(typeof(OBJECT_ATTRIBUTES));
obj_attr_ptr = Marshal.AllocHGlobal(obj_attr_len);
//инициализируем OBJECT_ATTRIBUTES
obj_attr = new OBJECT_ATTRIBUTES(IOhelper.GetKernelFileName(file_name), (uint)ntApiFS.OBJ_CASE_INSENSITIVE);
Marshal.StructureToPtr(obj_attr, obj_attr_ptr, true);
//инициализируем IO_STATUS_BLOCK
IO_STATUS_BLOCK status_block = new IO_STATUS_BLOCK();
//открываем...
uint res = ntApiFS.NtOpenFile
(ref ret,
file_access,
obj_attr_ptr,
ref status_block,
(ulong)file_share,
(ulong)options);
NTSTATUS_helper.ThrowOnError(res, status_block, NTSTATUS_severity.Warning);
return(ret);
}
finally
{
obj_attr.Dispose();
}
}
public static NT_FILE_BASIC_INFO GetFileInfo_basic(IntPtr file_handle)
{
IntPtr ret_ptr = IntPtr.Zero;
try
{
//нинциализируем IO_STATUS
IO_STATUS_BLOCK status_block = new IO_STATUS_BLOCK();
//инициализируем NT_FILE_BASIC_INFO
int ret_len = Marshal.SizeOf(typeof(NT_FILE_BASIC_INFO));
ret_ptr = Marshal.AllocHGlobal(ret_len);
//вызываем - по некторым сведениям вызов может в некоторых случаях блокироваться до
//бесконечности!
uint res = ntApiFS.NtQueryInformationFile
(file_handle,
ref status_block,
ret_ptr,
ret_len,
FILE_INFORMATION_CLASS.FileBasicInformation);
//обрабатываем исключения
NTSTATUS_helper.ThrowOnError(res, status_block, NTSTATUS_severity.Warning);
//получаем управляемую структуру из указателя
NT_FILE_BASIC_INFO ret = (NT_FILE_BASIC_INFO)Marshal.PtrToStructure
(ret_ptr,
typeof(NT_FILE_BASIC_INFO));
return(ret);
}
finally
{
if (ret_ptr != IntPtr.Zero)
{
Marshal.FreeHGlobal(ret_ptr);
}
}
}
public static void ThrowOnError(uint nt_status, IO_STATUS_BLOCK status_block, NTSTATUS_severity throw_severity)
{
if (nt_status == STATUS_SUCCESS)
{
return;
}
var sever = GetSeverity(nt_status);
if (sever >= throw_severity)
{
var message = string.Format("NT kernel exception. Returns status 0x{0:X}.", nt_status);
if (Enum.IsDefined(typeof(NTSTATUS_known), nt_status))
{
message = message + " " + ((NTSTATUS_known)nt_status).ToString();
}
var ex_nt = new ExceptionNT
(message, nt_status, status_block);
ex_nt.Source = "kernel";
throw ex_nt;
}
}
public InternalEnumerator(string file_name)
{
file_h = WinApiFS.CreateFile_intptr
(file_name,
Win32FileAccess.GENERIC_READ,
FileShare.ReadWrite,
IntPtr.Zero,
FileMode.Open,
CreateFileOptions.BACKUP_SEMANTICS, //need for retrieve info about directory
IntPtr.Zero);
if (file_h.ToInt32() == WinApiFS.INVALID_HANDLE_VALUE)
{
int win_err = Marshal.GetLastWin32Error();
Exception ex = new Win32Exception(win_err);
throw ex;
}
need_free_file_h = true;
int buffer_size = STREAM_INFO_BUFFER_LEN;
need_free_buffer_h = true;
buffer_h = Marshal.AllocHGlobal(buffer_size);
Marshal.WriteInt32(buffer_h, 4, 0);
IO_STATUS_BLOCK status = new IO_STATUS_BLOCK();
uint res = ntApiFS.NtQueryInformationFile
(file_h,
ref status,
buffer_h,
buffer_size,
FILE_INFORMATION_CLASS.FileStreamInformation);
//check result
NTSTATUS_helper.ThrowOnError(res, status, NTSTATUS_severity.Warning);
}
public static FILE_FS_ATTRIBUTE_INFORMATION GetFileVolumeAttributeInfo(IntPtr file_handle, IntPtr buffer, int buffer_len)
{
IO_STATUS_BLOCK status = new IO_STATUS_BLOCK();
bool need_free_buffer = false;
IntPtr ret_buffer = buffer;
int ret_buffer_len = buffer_len;
try
{
if (buffer_len == 0)
{
need_free_buffer = true;
ret_buffer_len = VOLUME_INFO_BUFFER_LEN;
ret_buffer = Marshal.AllocHGlobal(VOLUME_INFO_BUFFER_LEN);
}
uint res = ntApiFS.NtQueryVolumeInformationFile
(file_handle,
ref status,
ret_buffer,
ret_buffer_len,
FS_INFORMATION_CLASS.FileFsAttributeInformation);
//check res
NTSTATUS_helper.ThrowOnError(res, status, NTSTATUS_severity.Warning);
FILE_FS_ATTRIBUTE_INFORMATION ret = FILE_FS_ATTRIBUTE_INFORMATION.FromBuffer(ret_buffer);
return(ret);
}
finally
{
if (need_free_buffer)
{
Marshal.FreeHGlobal(ret_buffer);
}
}
}
public static extern uint NtQueryInformationFile
(IntPtr fileHandle,
ref IO_STATUS_BLOCK IoStatusBlock,
IntPtr pInfoBlock,
int length,
FILE_INFORMATION_CLASS fileInformation);
public static extern uint NtQueryVolumeInformationFile
(IntPtr FileHandle,
ref IO_STATUS_BLOCK IoStatusBlock,
IntPtr FileSystemInformation,
int Length,
FS_INFORMATION_CLASS FileSystemInformationClass);
public static NT_FILE_STREAM_INFORMATION[] GetFileInfo_stream(IntPtr file_handle, IntPtr buffer, int buffer_size)
{
//init IO_STATUS_BLOCK
IO_STATUS_BLOCK status = new IO_STATUS_BLOCK();
bool need_free_buffer = false;
try
{
if (buffer_size == 0)
{
buffer_size = STREAM_INFO_BUFFER_LEN;
}
if (buffer == IntPtr.Zero)
{
need_free_buffer = true;
buffer = Marshal.AllocHGlobal(buffer_size);
}
//trick
//how to determine, if buffer unchanged?
//write 0 to StreamNameLength member
Marshal.WriteInt32(buffer, 4, 0);
uint res = ntApiFS.NtQueryInformationFile
(file_handle,
ref status,
buffer,
buffer_size,
FILE_INFORMATION_CLASS.FileStreamInformation);
//check res
NTSTATUS_helper.ThrowOnError(res, status, NTSTATUS_severity.Warning);
//if success, continue
List <NT_FILE_STREAM_INFORMATION> ret_list = new List <NT_FILE_STREAM_INFORMATION>();
int current_offset = 0;
while (true)
{
NT_FILE_STREAM_INFORMATION current_info = new NT_FILE_STREAM_INFORMATION();
//first 4 bytes - offset to next entry
current_info.NextEntryOffset = Marshal.ReadInt32(buffer, current_offset);
//next 4 bytes - stream name len (in bytes)
current_info.StreamNameLength = Marshal.ReadInt32(buffer, current_offset + 4);
if ((current_info.StreamNameLength == 0) && (ret_list.Count == 0))
{
//that is no streams at all (as directory without AFS)
break;
}
//next 8 bytes - stream size
current_info.StreamSize = Marshal.ReadInt64(buffer, current_offset + 8);
//next 8 bytes - stream allocastion size
current_info.StreamAllocationSize = Marshal.ReadInt64(buffer, current_offset + 16);
//next StreamNameLength bytes - unicode stream name
current_info.StreamName = Marshal.PtrToStringUni
(new IntPtr(buffer.ToInt64() + (long)current_offset + 24L), (int)current_info.StreamNameLength / 2);
//add to result
ret_list.Add(current_info);
if (current_info.NextEntryOffset == 0)
{
//that is last member
break;
}
else
{
current_offset += (int)current_info.NextEntryOffset;
}
}
return(ret_list.ToArray());
}
finally
{
if (need_free_buffer)
{
if (buffer != IntPtr.Zero)
{
Marshal.FreeHGlobal(buffer);
}
}
}
}
public ExceptionNT(string message, uint nt_status, IO_STATUS_BLOCK status_block)
: base(message)
{
NT_status = nt_status;
NT_status_block = status_block;
}
