2023-08-17 10:45:50 +02:00
|
|
|
#ifndef DRIVER_H
|
|
|
|
#define DRIVER_H
|
|
|
|
|
|
|
|
#include <ntifs.h>
|
|
|
|
#include <wdftypes.h>
|
|
|
|
#include <wdf.h>
|
2023-09-25 17:41:38 +02:00
|
|
|
|
2023-09-02 15:47:15 +02:00
|
|
|
#include "common.h"
|
2023-09-25 17:41:38 +02:00
|
|
|
#include "queue.h"
|
|
|
|
#include "modules.h"
|
2023-08-17 10:45:50 +02:00
|
|
|
|
2023-09-01 18:45:06 +02:00
|
|
|
#define DRIVER_PATH_MAX_LENGTH 512
|
2023-09-11 06:53:46 +02:00
|
|
|
#define MOTHERBOARD_SERIAL_CODE_LENGTH 64
|
|
|
|
#define DEVICE_DRIVE_0_SERIAL_CODE_LENGTH 64
|
2023-09-04 15:36:26 +02:00
|
|
|
|
2023-09-18 05:15:26 +02:00
|
|
|
#define MAX_REPORTS_PER_IRP 20
|
|
|
|
|
2023-09-05 18:04:06 +02:00
|
|
|
#define POOL_TAG_STRINGS 'strs'
|
|
|
|
|
2023-09-06 17:33:08 +02:00
|
|
|
#define IOCTL_STORAGE_QUERY_PROPERTY 0x002D1400
|
|
|
|
|
2023-09-04 15:36:26 +02:00
|
|
|
typedef struct _SYSTEM_INFORMATION
|
|
|
|
{
|
2023-09-04 17:00:36 +02:00
|
|
|
CHAR motherboard_serial[ MOTHERBOARD_SERIAL_CODE_LENGTH ];
|
2023-09-06 17:33:08 +02:00
|
|
|
CHAR drive_0_serial[ DEVICE_DRIVE_0_SERIAL_CODE_LENGTH ];
|
2023-09-04 15:36:26 +02:00
|
|
|
|
|
|
|
}SYSTEM_INFORMATION, * PSYSTEM_INFORMATION;
|
2023-09-01 18:45:06 +02:00
|
|
|
|
2023-09-02 10:54:04 +02:00
|
|
|
NTSTATUS InitialiseProcessConfigOnProcessLaunch(
|
2023-08-24 15:12:49 +02:00
|
|
|
_In_ PIRP Irp
|
2023-08-20 16:12:04 +02:00
|
|
|
);
|
|
|
|
|
2023-08-24 15:12:49 +02:00
|
|
|
VOID GetProtectedProcessEProcess(
|
2023-08-30 15:23:04 +02:00
|
|
|
_Out_ PEPROCESS* Process
|
2023-08-20 16:12:04 +02:00
|
|
|
);
|
|
|
|
|
2023-08-24 15:12:49 +02:00
|
|
|
|
|
|
|
VOID GetProtectedProcessId(
|
2023-08-24 17:10:40 +02:00
|
|
|
_Out_ PLONG ProcessId
|
|
|
|
);
|
|
|
|
|
2023-09-01 14:30:32 +02:00
|
|
|
VOID ReadProcessInitialisedConfigFlag(
|
2023-08-24 17:10:40 +02:00
|
|
|
_Out_ PBOOLEAN Flag
|
2023-08-20 16:12:04 +02:00
|
|
|
);
|
|
|
|
|
2023-09-01 18:45:06 +02:00
|
|
|
VOID GetDriverPath(
|
2023-09-11 11:23:29 +02:00
|
|
|
_Out_ PUNICODE_STRING DriverPath
|
2023-09-01 18:45:06 +02:00
|
|
|
);
|
|
|
|
|
2023-09-07 19:49:36 +02:00
|
|
|
VOID GetDriverConfigSystemInformation(
|
2023-09-11 11:23:29 +02:00
|
|
|
_Out_ PSYSTEM_INFORMATION* SystemInformation
|
2023-09-07 19:49:36 +02:00
|
|
|
);
|
2023-08-24 15:12:49 +02:00
|
|
|
|
2023-09-25 17:41:38 +02:00
|
|
|
VOID GetApcContext(
|
|
|
|
_Inout_ PVOID* Context,
|
|
|
|
_In_ LONG ContextIdentifier
|
|
|
|
);
|
|
|
|
|
|
|
|
VOID InsertApcContext(
|
|
|
|
_In_ PVOID Context
|
|
|
|
);
|
|
|
|
|
2023-09-26 12:00:45 +02:00
|
|
|
VOID
|
|
|
|
GetApcContextByIndex(
|
|
|
|
_Inout_ PVOID* Context,
|
|
|
|
_In_ INT Index
|
2023-09-25 17:41:38 +02:00
|
|
|
);
|
|
|
|
|
2023-09-26 15:32:06 +02:00
|
|
|
VOID
|
|
|
|
IncrementApcCount(
|
|
|
|
_In_ LONG ContextId
|
|
|
|
);
|
|
|
|
|
|
|
|
VOID
|
|
|
|
FreeApcAndDecrementApcCount(
|
|
|
|
_In_ PRKAPC Apc,
|
|
|
|
_In_ LONG ContextId
|
|
|
|
);
|
|
|
|
|
2023-09-27 06:22:14 +02:00
|
|
|
NTSTATUS
|
|
|
|
QueryActiveApcContextsForCompletion();
|
|
|
|
|
2023-09-27 15:10:12 +02:00
|
|
|
VOID
|
|
|
|
TerminateProtectedProcessOnViolation();
|
2023-09-01 13:46:31 +02:00
|
|
|
|
2023-09-27 15:10:12 +02:00
|
|
|
VOID
|
|
|
|
ClearProcessConfigOnProcessTermination();
|
2023-09-26 15:32:06 +02:00
|
|
|
|
2023-08-17 10:45:50 +02:00
|
|
|
#endif
|