| 3118 | |
| 3119 | |
| 3120 | class SMB2_Create_Request(_SMB2_Payload, _NTLMPayloadPacket): |
| 3121 | name = "SMB2 CREATE Request" |
| 3122 | Command = 0x0005 |
| 3123 | OFFSET = 56 + 64 |
| 3124 | _NTLM_PAYLOAD_FIELD_NAME = "Buffer" |
| 3125 | fields_desc = [ |
| 3126 | XLEShortField("StructureSize", 0x39), |
| 3127 | ByteField("ShareType", 0), |
| 3128 | ByteEnumField("RequestedOplockLevel", 0, SMB2_OPLOCK_LEVELS), |
| 3129 | LEIntEnumField( |
| 3130 | "ImpersonationLevel", |
| 3131 | 0, |
| 3132 | { |
| 3133 | 0x00000000: "Anonymous", |
| 3134 | 0x00000001: "Identification", |
| 3135 | 0x00000002: "Impersonation", |
| 3136 | 0x00000003: "Delegate", |
| 3137 | }, |
| 3138 | ), |
| 3139 | LELongField("SmbCreateFlags", 0), |
| 3140 | LELongField("Reserved", 0), |
| 3141 | FlagsField("DesiredAccess", 0, -32, SMB2_ACCESS_FLAGS_FILE), |
| 3142 | FlagsField("FileAttributes", 0x00000080, -32, FileAttributes), |
| 3143 | FlagsField( |
| 3144 | "ShareAccess", |
| 3145 | 0, |
| 3146 | -32, |
| 3147 | { |
| 3148 | 0x00000001: "FILE_SHARE_READ", |
| 3149 | 0x00000002: "FILE_SHARE_WRITE", |
| 3150 | 0x00000004: "FILE_SHARE_DELETE", |
| 3151 | }, |
| 3152 | ), |
| 3153 | LEIntEnumField( |
| 3154 | "CreateDisposition", |
| 3155 | 1, |
| 3156 | { |
| 3157 | 0x00000000: "FILE_SUPERSEDE", |
| 3158 | 0x00000001: "FILE_OPEN", |
| 3159 | 0x00000002: "FILE_CREATE", |
| 3160 | 0x00000003: "FILE_OPEN_IF", |
| 3161 | 0x00000004: "FILE_OVERWRITE", |
| 3162 | 0x00000005: "FILE_OVERWRITE_IF", |
| 3163 | }, |
| 3164 | ), |
| 3165 | FlagsField( |
| 3166 | "CreateOptions", |
| 3167 | 0, |
| 3168 | -32, |
| 3169 | { |
| 3170 | 0x00000001: "FILE_DIRECTORY_FILE", |
| 3171 | 0x00000002: "FILE_WRITE_THROUGH", |
| 3172 | 0x00000004: "FILE_SEQUENTIAL_ONLY", |
| 3173 | 0x00000008: "FILE_NO_INTERMEDIATE_BUFFERING", |
| 3174 | 0x00000010: "FILE_SYNCHRONOUS_IO_ALERT", |
| 3175 | 0x00000020: "FILE_SYNCHRONOUS_IO_NONALERT", |
| 3176 | 0x00000040: "FILE_NON_DIRECTORY_FILE", |
| 3177 | 0x00000100: "FILE_COMPLETE_IF_OPLOCKED", |
no test coverage detected
searching dependent graphs…