This commit is contained in:
lhodges1 2023-09-11 14:53:46 +10:00
parent c4261e8f03
commit b20232878b
5 changed files with 11 additions and 7 deletions

View file

@ -7,8 +7,8 @@
#include "common.h"
#define DRIVER_PATH_MAX_LENGTH 512
#define MOTHERBOARD_SERIAL_CODE_LENGTH 32
#define DEVICE_DRIVE_0_SERIAL_CODE_LENGTH 32
#define MOTHERBOARD_SERIAL_CODE_LENGTH 64
#define DEVICE_DRIVE_0_SERIAL_CODE_LENGTH 64
#define POOL_TAG_STRINGS 'strs'

View file

@ -23,9 +23,9 @@ namespace server
[StructLayout(LayoutKind.Sequential, CharSet = CharSet.Ansi)]
public unsafe struct PACKET_CLIENT_HARDWARE_INFORMATION
{
[MarshalAs(UnmanagedType.ByValTStr, SizeConst = 32)]
[MarshalAs(UnmanagedType.ByValTStr, SizeConst = 64)]
public string MotherboardSerialNumber;
[MarshalAs(UnmanagedType.ByValTStr, SizeConst = 32)]
[MarshalAs(UnmanagedType.ByValTStr, SizeConst = 64)]
public string DeviceDriver0Serial;
}
}

View file

@ -589,6 +589,10 @@ VOID kernelmode::Driver::VerifyProcessLoadedModuleExecutableRegions()
memcpy( &report.module_name, &module_name_string, module_name_string.length() );
this->report_interface->ReportViolation( &report );
}
else
{
LOG_INFO("Module %s is valid", module_entry.szModule );
}
} while ( Module32Next( process_modules_handle, &module_entry ) );

View file

@ -54,7 +54,7 @@ DWORD WINAPI Init(HINSTANCE hinstDLL)
kmanager.PerformIntegrityCheck();
break;
case 2:
kmanager.RunNmiCallbacks();
//kmanager.RunNmiCallbacks();
break;
case 3:
kmanager.VerifySystemModules();

View file

@ -7,8 +7,8 @@
#define MESSAGE_TYPE_CLIENT_SEND 2
#define MESSAGE_TYPE_CLIENT_REQUEST 3
#define MOTHERBOARD_SERIAL_CODE_LENGTH 32
#define DEVICE_DRIVE_0_SERIAL_CODE_LENGTH 32
#define MOTHERBOARD_SERIAL_CODE_LENGTH 64
#define DEVICE_DRIVE_0_SERIAL_CODE_LENGTH 64
namespace global
{