/* * Process Hacker - * driver handle * * Copyright (C) 2009 wj32 * * This file is part of Process Hacker. * * Process Hacker is free software; you can redistribute it and/or modify * it under the terms of the GNU General Public License as published by * the Free Software Foundation, either version 3 of the License, or * (at your option) any later version. * * Process Hacker is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with Process Hacker. If not, see . */ using System; using System.Runtime.InteropServices; using ProcessHacker.Native.Api; namespace ProcessHacker.Native.Objects { public class DriverHandle : NativeHandle { public DriverHandle(string name) : this(name, 0, null) { } public DriverHandle(string name, ObjectFlags objectFlags, DirectoryHandle rootDirectory) { ObjectAttributes oa = new ObjectAttributes(name, objectFlags, rootDirectory); try { this.Handle = KProcessHacker.Instance.KphOpenDriver(oa).ToIntPtr(); } finally { oa.Dispose(); } } public DriverBasicInformation GetBasicInformation() { unsafe { DriverBasicInformation basicInfo; int retLength; KProcessHacker.Instance.KphQueryInformationDriver( this, DriverInformationClass.DriverBasicInformation, new IntPtr(&basicInfo), Marshal.SizeOf(typeof(DriverBasicInformation)), out retLength ); return basicInfo; } } public string GetDriverName() { return this.GetInformationUnicodeString(DriverInformationClass.DriverNameInformation); } private string GetInformationUnicodeString(DriverInformationClass infoClass) { using (MemoryAlloc data = new MemoryAlloc(0x1000)) { int retLength = 0; try { KProcessHacker.Instance.KphQueryInformationDriver( this, infoClass, data, data.Size, out retLength ); } catch (WindowsException) { data.Resize(retLength); KProcessHacker.Instance.KphQueryInformationDriver( this, infoClass, data, data.Size, out retLength ); } return data.ReadStruct().Read(); } } public string GetServiceKeyName() { return this.GetInformationUnicodeString(DriverInformationClass.DriverServiceKeyNameInformation); } } }