760 lines
20 KiB
C++
760 lines
20 KiB
C++
|
// *********************************************************************************
|
||
|
|
//
|
||
|
|
// Copyright (c) Microsoft Corporation
|
||
|
|
//
|
||
|
|
// Module Name:
|
||
|
|
//
|
||
|
|
// Init.cpp
|
||
|
|
//
|
||
|
|
// Abstract:
|
||
|
|
//
|
||
|
|
// This module implements the general initialization stuff
|
||
|
|
//
|
||
|
|
// Author:
|
||
|
|
//
|
||
|
|
// Sunil G.V.N. Murali (murali.sunil@wipro.com) 24-Nov-2000
|
||
|
|
//
|
||
|
|
// Revision History:
|
||
|
|
//
|
||
|
|
// Sunil G.V.N. Murali (murali.sunil@wipro.com) 24-Nov-2000 : Created It.
|
||
|
|
//
|
||
|
|
// *********************************************************************************
|
||
|
|
|
||
|
|
#include "pch.h"
|
||
|
|
#include "wmi.h"
|
||
|
|
#include "tasklist.h"
|
||
|
|
|
||
|
|
//
|
||
|
|
// macros
|
||
|
|
//
|
||
|
|
#define RELEASE_MEMORY( block ) \
|
||
|
|
if ( NULL != (block) ) \
|
||
|
|
{ \
|
||
|
|
FreeMemory( (LPVOID * )&block ); \
|
||
|
|
(block) = NULL; \
|
||
|
|
} \
|
||
|
|
1
|
||
|
|
|
||
|
|
#define DESTROY_ARRAY( array ) \
|
||
|
|
if ( (array) != NULL ) \
|
||
|
|
{ \
|
||
|
|
DestroyDynamicArray( &(array) ); \
|
||
|
|
(array) = NULL; \
|
||
|
|
} \
|
||
|
|
1
|
||
|
|
|
||
|
|
CTaskList::CTaskList()
|
||
|
|
/*++
|
||
|
|
Routine Description:
|
||
|
|
CTaskList contructor
|
||
|
|
|
||
|
|
Arguments:
|
||
|
|
NONE
|
||
|
|
|
||
|
|
Return Value:
|
||
|
|
NONE
|
||
|
|
--*/
|
||
|
|
{
|
||
|
|
// init to defaults
|
||
|
|
m_pWbemLocator = NULL;
|
||
|
|
m_pEnumObjects = NULL;
|
||
|
|
m_pWbemServices = NULL;
|
||
|
|
m_pAuthIdentity = NULL;
|
||
|
|
m_bVerbose = FALSE;
|
||
|
|
m_bAllServices = FALSE;
|
||
|
|
m_bAllModules = FALSE;
|
||
|
|
m_dwFormat = 0;
|
||
|
|
m_arrFilters = NULL;
|
||
|
|
m_bNeedPassword = FALSE;
|
||
|
|
m_bNeedModulesInfo = FALSE;
|
||
|
|
m_bNeedServicesInfo = FALSE;
|
||
|
|
m_bNeedWindowTitles = FALSE;
|
||
|
|
m_bNeedUserContextInfo = FALSE;
|
||
|
|
m_bLocalSystem = FALSE;
|
||
|
|
m_pColumns = NULL;
|
||
|
|
m_arrFiltersEx = NULL;
|
||
|
|
m_arrWindowTitles = NULL;
|
||
|
|
m_pfilterConfigs = NULL;
|
||
|
|
m_dwGroupSep = 0;
|
||
|
|
m_arrTasks = NULL;
|
||
|
|
m_dwProcessId = 0;
|
||
|
|
m_bIsHydra = FALSE;
|
||
|
|
m_hServer = NULL;
|
||
|
|
m_hWinstaLib = NULL;
|
||
|
|
m_pProcessInfo = NULL;
|
||
|
|
m_ulNumberOfProcesses = 0;
|
||
|
|
m_bCloseConnection = FALSE;
|
||
|
|
m_dwServicesCount = 0;
|
||
|
|
m_pServicesInfo = NULL;
|
||
|
|
m_pdb = NULL;
|
||
|
|
m_bUseRemote = FALSE;
|
||
|
|
m_pfnWinStationFreeMemory = NULL;
|
||
|
|
m_pfnWinStationOpenServerW = NULL;
|
||
|
|
m_pfnWinStationCloseServer = NULL;
|
||
|
|
m_pfnWinStationFreeGAPMemory = NULL;
|
||
|
|
m_pfnWinStationGetAllProcesses = NULL;
|
||
|
|
m_pfnWinStationNameFromLogonIdW = NULL;
|
||
|
|
m_pfnWinStationEnumerateProcesses = NULL;
|
||
|
|
m_bUsage = FALSE;
|
||
|
|
m_bLocalSystem = TRUE;
|
||
|
|
m_bRemoteWarning = FALSE;
|
||
|
|
}
|
||
|
|
|
||
|
|
|
||
|
|
CTaskList::~CTaskList()
|
||
|
|
/*++
|
||
|
|
Routine Description:
|
||
|
|
CTaskList destructor
|
||
|
|
|
||
|
|
Arguments:
|
||
|
|
NONE
|
||
|
|
|
||
|
|
Return Value:
|
||
|
|
NONE
|
||
|
|
--*/
|
||
|
|
{
|
||
|
|
//
|
||
|
|
// de-allocate memory allocations
|
||
|
|
//
|
||
|
|
|
||
|
|
//
|
||
|
|
// destroy dynamic arrays
|
||
|
|
DESTROY_ARRAY( m_arrTasks );
|
||
|
|
DESTROY_ARRAY( m_arrFilters );
|
||
|
|
DESTROY_ARRAY( m_arrFiltersEx );
|
||
|
|
DESTROY_ARRAY( m_arrWindowTitles );
|
||
|
|
|
||
|
|
//
|
||
|
|
// memory ( with new operator )
|
||
|
|
// NOTE: should not free m_pszWindowStation and m_pszDesktop
|
||
|
|
RELEASE_MEMORY( m_pColumns );
|
||
|
|
RELEASE_MEMORY( m_pfilterConfigs );
|
||
|
|
|
||
|
|
//
|
||
|
|
// release WMI / COM interfaces
|
||
|
|
SAFE_RELEASE( m_pWbemLocator );
|
||
|
|
SAFE_RELEASE( m_pWbemServices );
|
||
|
|
SAFE_RELEASE( m_pEnumObjects );
|
||
|
|
|
||
|
|
// free authentication identity structure
|
||
|
|
// release the existing auth identity structure
|
||
|
|
WbemFreeAuthIdentity( &m_pAuthIdentity );
|
||
|
|
|
||
|
|
// close the connection to the remote machine
|
||
|
|
if ( TRUE == m_bCloseConnection )
|
||
|
|
{
|
||
|
|
CloseConnection( m_strUNCServer );
|
||
|
|
}
|
||
|
|
|
||
|
|
// free the memory allocated for services variables
|
||
|
|
FreeMemory( (LPVOID * )&m_pServicesInfo );
|
||
|
|
|
||
|
|
// free the memory allocated for performance block
|
||
|
|
FreeMemory( (LPVOID * )&m_pdb );
|
||
|
|
|
||
|
|
//
|
||
|
|
// free winstation block
|
||
|
|
if ( ( FALSE == m_bIsHydra ) &&
|
||
|
|
( NULL != m_pProcessInfo ) )
|
||
|
|
{
|
||
|
|
// free the GAP memory block
|
||
|
|
WinStationFreeGAPMemory( GAP_LEVEL_BASIC,
|
||
|
|
(PTS_ALL_PROCESSES_INFO) m_pProcessInfo, m_ulNumberOfProcesses );
|
||
|
|
|
||
|
|
// ...
|
||
|
|
m_pProcessInfo = NULL;
|
||
|
|
}
|
||
|
|
else
|
||
|
|
{
|
||
|
|
if ( ( TRUE == m_bIsHydra ) &&
|
||
|
|
( NULL != m_pProcessInfo ) )
|
||
|
|
{
|
||
|
|
// free the winsta memory block
|
||
|
|
WinStationFreeMemory( m_pProcessInfo );
|
||
|
|
m_pProcessInfo = NULL;
|
||
|
|
}
|
||
|
|
}
|
||
|
|
// close the connection window station if needed
|
||
|
|
if ( NULL != m_hServer )
|
||
|
|
{
|
||
|
|
WinStationCloseServer( m_hServer );
|
||
|
|
}
|
||
|
|
|
||
|
|
// free the library
|
||
|
|
if ( NULL != m_hWinstaLib )
|
||
|
|
{
|
||
|
|
FreeLibrary( m_hWinstaLib );
|
||
|
|
m_hWinstaLib = NULL;
|
||
|
|
m_pfnWinStationFreeMemory = NULL;
|
||
|
|
m_pfnWinStationOpenServerW = NULL;
|
||
|
|
m_pfnWinStationCloseServer = NULL;
|
||
|
|
m_pfnWinStationFreeGAPMemory = NULL;
|
||
|
|
m_pfnWinStationGetAllProcesses = NULL;
|
||
|
|
m_pfnWinStationEnumerateProcesses = NULL;
|
||
|
|
}
|
||
|
|
|
||
|
|
// un-initialize the COM library
|
||
|
|
CoUninitialize();
|
||
|
|
}
|
||
|
|
|
||
|
|
|
||
|
|
BOOL
|
||
|
|
CTaskList::Initialize(
|
||
|
|
void
|
||
|
|
)
|
||
|
|
/*++
|
||
|
|
Routine Description:
|
||
|
|
initialize the task list utility
|
||
|
|
|
||
|
|
Arguments:
|
||
|
|
NONE
|
||
|
|
|
||
|
|
Return Value:
|
||
|
|
TRUE : if filters are appropriately specified
|
||
|
|
FALSE : if filters are errorneously specified
|
||
|
|
--*/
|
||
|
|
{
|
||
|
|
// local variables
|
||
|
|
CHString str;
|
||
|
|
LONG lTemp = 0;
|
||
|
|
|
||
|
|
//
|
||
|
|
// memory allocations
|
||
|
|
|
||
|
|
// if at all any occurs, we know that is 'coz of the
|
||
|
|
// failure in memory allocation ... so set the error
|
||
|
|
SetLastError( (DWORD)E_OUTOFMEMORY );
|
||
|
|
SaveLastError();
|
||
|
|
|
||
|
|
// filters ( user supplied )
|
||
|
|
if ( NULL == m_arrFilters )
|
||
|
|
{
|
||
|
|
m_arrFilters = CreateDynamicArray();
|
||
|
|
if ( NULL == m_arrFilters )
|
||
|
|
{
|
||
|
|
return FALSE;
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
// filters ( program generated parsed filters )
|
||
|
|
if ( NULL == m_arrFiltersEx )
|
||
|
|
{
|
||
|
|
m_arrFiltersEx = CreateDynamicArray();
|
||
|
|
if ( NULL == m_arrFiltersEx )
|
||
|
|
{
|
||
|
|
return FALSE;
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
// columns configuration info
|
||
|
|
if ( NULL == m_pColumns )
|
||
|
|
{
|
||
|
|
m_pColumns = ( TCOLUMNS * )AllocateMemory( sizeof( TCOLUMNS ) * MAX_COLUMNS );
|
||
|
|
if ( NULL == m_pColumns )
|
||
|
|
{
|
||
|
|
return FALSE;
|
||
|
|
}
|
||
|
|
// init to ZERO's
|
||
|
|
SecureZeroMemory( m_pColumns, MAX_COLUMNS * sizeof( TCOLUMNS ) );
|
||
|
|
}
|
||
|
|
|
||
|
|
// filters configuration info
|
||
|
|
if ( NULL == m_pfilterConfigs )
|
||
|
|
{
|
||
|
|
m_pfilterConfigs = ( TFILTERCONFIG * )AllocateMemory( sizeof( TFILTERCONFIG ) * MAX_FILTERS );
|
||
|
|
if ( NULL == m_pfilterConfigs )
|
||
|
|
{
|
||
|
|
return FALSE;
|
||
|
|
}
|
||
|
|
// init to ZERO's
|
||
|
|
SecureZeroMemory( m_pfilterConfigs, MAX_FILTERS * sizeof( TFILTERCONFIG ) );
|
||
|
|
}
|
||
|
|
|
||
|
|
// window titles
|
||
|
|
if ( NULL == m_arrWindowTitles )
|
||
|
|
{
|
||
|
|
m_arrWindowTitles = CreateDynamicArray();
|
||
|
|
if ( NULL == m_arrWindowTitles )
|
||
|
|
{
|
||
|
|
return FALSE;
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
// tasks
|
||
|
|
if ( NULL == m_arrTasks )
|
||
|
|
{
|
||
|
|
m_arrTasks = CreateDynamicArray();
|
||
|
|
if ( NULL == m_arrTasks )
|
||
|
|
{
|
||
|
|
return FALSE;
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
// initialize the COM library
|
||
|
|
if ( FALSE == InitializeCom( &m_pWbemLocator ) )
|
||
|
|
{
|
||
|
|
return FALSE;
|
||
|
|
}
|
||
|
|
//
|
||
|
|
// get the locale specific information
|
||
|
|
//
|
||
|
|
|
||
|
|
try
|
||
|
|
{
|
||
|
|
// sub-local variables
|
||
|
|
LPWSTR pwszTemp = NULL;
|
||
|
|
|
||
|
|
//
|
||
|
|
// get the time seperator character
|
||
|
|
lTemp = GetLocaleInfo( LOCALE_USER_DEFAULT, LOCALE_STIME, NULL, 0 );
|
||
|
|
if ( 0 == lTemp )
|
||
|
|
{
|
||
|
|
// set the default seperator
|
||
|
|
pwszTemp = m_strTimeSep.GetBufferSetLength( 2 );
|
||
|
|
SecureZeroMemory( pwszTemp, 2 * sizeof( WCHAR ) );
|
||
|
|
StringCopy( pwszTemp, _T( ":" ), 2 );
|
||
|
|
}
|
||
|
|
else
|
||
|
|
{
|
||
|
|
// get the time field seperator
|
||
|
|
pwszTemp = m_strTimeSep.GetBufferSetLength( lTemp + 2 );
|
||
|
|
SecureZeroMemory( pwszTemp, ( lTemp + 2 ) * sizeof( WCHAR ) );
|
||
|
|
lTemp = GetLocaleInfo( LOCALE_USER_DEFAULT, LOCALE_STIME, pwszTemp, lTemp );
|
||
|
|
if( 0 == lTemp )
|
||
|
|
{
|
||
|
|
return FALSE;
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
//
|
||
|
|
// get the group seperator character
|
||
|
|
lTemp = GetLocaleInfo( LOCALE_USER_DEFAULT, LOCALE_SGROUPING, NULL, 0 );
|
||
|
|
if ( 0 == lTemp )
|
||
|
|
{
|
||
|
|
// we don't know how to resolve this
|
||
|
|
return FALSE;
|
||
|
|
}
|
||
|
|
else
|
||
|
|
{
|
||
|
|
// get the group seperation character
|
||
|
|
pwszTemp = str.GetBufferSetLength( lTemp + 2 );
|
||
|
|
SecureZeroMemory( pwszTemp, ( lTemp + 2 ) * sizeof( WCHAR ) );
|
||
|
|
lTemp = GetLocaleInfo( LOCALE_USER_DEFAULT, LOCALE_SGROUPING, pwszTemp, lTemp );
|
||
|
|
if ( 0 == lTemp )
|
||
|
|
{
|
||
|
|
// we don't know how to resolve this
|
||
|
|
return FALSE;
|
||
|
|
}
|
||
|
|
|
||
|
|
// change the group info into appropriate number
|
||
|
|
lTemp = 0;
|
||
|
|
m_dwGroupSep = 0;
|
||
|
|
while ( lTemp < str.GetLength() )
|
||
|
|
{
|
||
|
|
if ( AsLong( str.Mid( lTemp, 1 ), 10 ) != 0 )
|
||
|
|
{
|
||
|
|
m_dwGroupSep = m_dwGroupSep * 10 + AsLong( str.Mid( lTemp, 1 ), 10 );
|
||
|
|
}
|
||
|
|
// increment by 2
|
||
|
|
lTemp += 2;
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
//
|
||
|
|
// get the thousand seperator character
|
||
|
|
lTemp = GetLocaleInfo( LOCALE_USER_DEFAULT, LOCALE_STHOUSAND, NULL, 0 );
|
||
|
|
if ( 0 == lTemp )
|
||
|
|
{
|
||
|
|
// we don't know how to resolve this
|
||
|
|
return FALSE;
|
||
|
|
}
|
||
|
|
else
|
||
|
|
{
|
||
|
|
// get the thousand sepeartion charactor
|
||
|
|
pwszTemp = m_strGroupThousSep.GetBufferSetLength( lTemp + 2 );
|
||
|
|
SecureZeroMemory( pwszTemp, ( lTemp + 2 ) * sizeof( WCHAR ) );
|
||
|
|
lTemp = GetLocaleInfo( LOCALE_USER_DEFAULT, LOCALE_STHOUSAND, pwszTemp, lTemp );
|
||
|
|
if ( 0 == lTemp )
|
||
|
|
{
|
||
|
|
// we don't know how to resolve this
|
||
|
|
return FALSE;
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
// release the CHStrig buffers
|
||
|
|
str.ReleaseBuffer();
|
||
|
|
m_strTimeSep.ReleaseBuffer();
|
||
|
|
m_strGroupThousSep.ReleaseBuffer();
|
||
|
|
}
|
||
|
|
catch( CHeap_Exception )
|
||
|
|
{
|
||
|
|
// out of memory
|
||
|
|
return FALSE;
|
||
|
|
}
|
||
|
|
|
||
|
|
//
|
||
|
|
// load the winsta library and needed functions
|
||
|
|
// NOTE: do not raise any error if loading of winsta dll fails
|
||
|
|
{ // Local variabels should be destroyed inside this block.
|
||
|
|
// +1 is for terminating NULL character.
|
||
|
|
LPWSTR lpszSystemPath = NULL;
|
||
|
|
DWORD dwLength = MAX_PATH + 1;
|
||
|
|
DWORD dwExpectedLength = 0;
|
||
|
|
DWORD dwActualBufLen = 0;
|
||
|
|
|
||
|
|
do
|
||
|
|
{
|
||
|
|
dwActualBufLen = dwLength + 5 + StringLength( WINSTA_DLLNAME, 0 );
|
||
|
|
// Length of 'System32' + Length of '\' + Length of 'WINSTA_DLLNAME' + Length of '\0'.
|
||
|
|
// 3 WCHARS are extra, to be on safer side.
|
||
|
|
lpszSystemPath = (LPWSTR) AllocateMemory( dwActualBufLen * sizeof( WCHAR ) );
|
||
|
|
if( NULL == lpszSystemPath )
|
||
|
|
{ // Out of memory.
|
||
|
|
m_hWinstaLib = NULL;
|
||
|
|
break;
|
||
|
|
}
|
||
|
|
|
||
|
|
dwExpectedLength = GetSystemDirectory( lpszSystemPath, dwLength );
|
||
|
|
if( ( 0 != dwExpectedLength ) ||
|
||
|
|
( dwLength > dwExpectedLength ) )
|
||
|
|
{ // Successful
|
||
|
|
StringConcat( lpszSystemPath, L"\\", dwActualBufLen );
|
||
|
|
StringConcat( lpszSystemPath, WINSTA_DLLNAME, dwActualBufLen );
|
||
|
|
m_hWinstaLib = ::LoadLibrary( lpszSystemPath );
|
||
|
|
FreeMemory( (LPVOID * )&lpszSystemPath );
|
||
|
|
break;
|
||
|
|
}
|
||
|
|
FreeMemory( (LPVOID * )&lpszSystemPath );
|
||
|
|
m_hWinstaLib = NULL;
|
||
|
|
// +1 is for terminating NULL character.
|
||
|
|
dwLength = dwExpectedLength + 1;
|
||
|
|
}while( 0 != dwExpectedLength );
|
||
|
|
}
|
||
|
|
|
||
|
|
if ( NULL != m_hWinstaLib )
|
||
|
|
{
|
||
|
|
// library loaded successfully ... now load the addresses of functions
|
||
|
|
m_pfnWinStationFreeMemory = (FUNC_WinStationFreeMemory) ::GetProcAddress( m_hWinstaLib, FUNCNAME_WinStationFreeMemory );
|
||
|
|
m_pfnWinStationCloseServer = (FUNC_WinStationCloseServer) ::GetProcAddress( m_hWinstaLib, FUNCNAME_WinStationCloseServer );
|
||
|
|
m_pfnWinStationOpenServerW = (FUNC_WinStationOpenServerW) ::GetProcAddress( m_hWinstaLib, FUNCNAME_WinStationOpenServerW );
|
||
|
|
m_pfnWinStationFreeGAPMemory = (FUNC_WinStationFreeGAPMemory) ::GetProcAddress( m_hWinstaLib, FUNCNAME_WinStationFreeGAPMemory );
|
||
|
|
m_pfnWinStationGetAllProcesses = (FUNC_WinStationGetAllProcesses) ::GetProcAddress( m_hWinstaLib, FUNCNAME_WinStationGetAllProcesses );
|
||
|
|
m_pfnWinStationNameFromLogonIdW = (FUNC_WinStationNameFromLogonIdW) ::GetProcAddress( m_hWinstaLib, FUNCNAME_WinStationNameFromLogonIdW );
|
||
|
|
m_pfnWinStationEnumerateProcesses = (FUNC_WinStationEnumerateProcesses) ::GetProcAddress( m_hWinstaLib, FUNCNAME_WinStationEnumerateProcesses );
|
||
|
|
|
||
|
|
// we will keep the library loaded in memory only if all the functions were loaded successfully
|
||
|
|
if ( ( NULL == m_pfnWinStationFreeMemory ) ||
|
||
|
|
( NULL == m_pfnWinStationCloseServer ) ||
|
||
|
|
( NULL == m_pfnWinStationOpenServerW ) ||
|
||
|
|
( NULL == m_pfnWinStationFreeGAPMemory ) ||
|
||
|
|
( NULL == m_pfnWinStationGetAllProcesses ) ||
|
||
|
|
( NULL == m_pfnWinStationEnumerateProcesses ) ||
|
||
|
|
( NULL == m_pfnWinStationNameFromLogonIdW ) )
|
||
|
|
|
||
|
|
{
|
||
|
|
// some (or) all of the functions were not loaded ... unload the library
|
||
|
|
FreeLibrary( m_hWinstaLib );
|
||
|
|
m_hWinstaLib = NULL;
|
||
|
|
m_pfnWinStationFreeMemory = NULL;
|
||
|
|
m_pfnWinStationOpenServerW = NULL;
|
||
|
|
m_pfnWinStationCloseServer = NULL;
|
||
|
|
m_pfnWinStationFreeGAPMemory = NULL;
|
||
|
|
m_pfnWinStationGetAllProcesses = NULL;
|
||
|
|
m_pfnWinStationNameFromLogonIdW = NULL;
|
||
|
|
m_pfnWinStationEnumerateProcesses = NULL;
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
// enable debug privelages
|
||
|
|
EnableDebugPriv();
|
||
|
|
|
||
|
|
// initialization is successful
|
||
|
|
SetLastError( NOERROR ); // clear the error
|
||
|
|
SetReason( NULL_STRING ); // clear the reason
|
||
|
|
return TRUE;
|
||
|
|
}
|
||
|
|
|
||
|
|
|
||
|
|
BOOL
|
||
|
|
CTaskList::EnableDebugPriv(
|
||
|
|
void
|
||
|
|
)
|
||
|
|
/*++
|
||
|
|
Routine Description:
|
||
|
|
Enables the debug privliges for the current process so that
|
||
|
|
this utility can terminate the processes on local system without any problem
|
||
|
|
|
||
|
|
Arguments:
|
||
|
|
NONE
|
||
|
|
|
||
|
|
Return Value:
|
||
|
|
TRUE upon successfull and FALSE if failed
|
||
|
|
--*/
|
||
|
|
{
|
||
|
|
// local variables
|
||
|
|
LUID luidValue ;
|
||
|
|
BOOL bResult = FALSE;
|
||
|
|
HANDLE hToken = NULL;
|
||
|
|
TOKEN_PRIVILEGES tkp;
|
||
|
|
|
||
|
|
SecureZeroMemory( &luidValue, sizeof( LUID ) );
|
||
|
|
SecureZeroMemory( &tkp, sizeof( TOKEN_PRIVILEGES ) );
|
||
|
|
|
||
|
|
// Retrieve a handle of the access token
|
||
|
|
bResult = OpenProcessToken( GetCurrentProcess(),
|
||
|
|
TOKEN_ADJUST_PRIVILEGES | TOKEN_QUERY, &hToken );
|
||
|
|
if ( FALSE == bResult )
|
||
|
|
{
|
||
|
|
// save the error messaage and return
|
||
|
|
SaveLastError();
|
||
|
|
return FALSE;
|
||
|
|
}
|
||
|
|
|
||
|
|
// Enable the SE_DEBUG_NAME privilege or disable
|
||
|
|
// all privileges, depends on this flag.
|
||
|
|
bResult = LookupPrivilegeValue( NULL, SE_DEBUG_NAME, &luidValue );
|
||
|
|
if ( FALSE == bResult )
|
||
|
|
{
|
||
|
|
// save the error messaage and return
|
||
|
|
SaveLastError();
|
||
|
|
CloseHandle( hToken );
|
||
|
|
return FALSE;
|
||
|
|
}
|
||
|
|
|
||
|
|
// prepare the token privileges structure
|
||
|
|
tkp.PrivilegeCount = 1;
|
||
|
|
tkp.Privileges[ 0 ].Luid = luidValue;
|
||
|
|
tkp.Privileges[ 0 ].Attributes = SE_PRIVILEGE_ENABLED;
|
||
|
|
|
||
|
|
// now enable the debug privileges in the token
|
||
|
|
bResult = AdjustTokenPrivileges( hToken, FALSE, &tkp, sizeof( TOKEN_PRIVILEGES ),
|
||
|
|
( PTOKEN_PRIVILEGES ) NULL, ( PDWORD ) NULL );
|
||
|
|
if ( FALSE == bResult )
|
||
|
|
{
|
||
|
|
// The return value of AdjustTokenPrivileges be texted
|
||
|
|
SaveLastError();
|
||
|
|
CloseHandle( hToken );
|
||
|
|
return FALSE;
|
||
|
|
}
|
||
|
|
|
||
|
|
// close the opened token handle
|
||
|
|
CloseHandle( hToken );
|
||
|
|
|
||
|
|
// enabled ... inform success
|
||
|
|
return TRUE;
|
||
|
|
}
|
||
|
|
|
||
|
|
|
||
|
|
BOOLEAN
|
||
|
|
CTaskList::WinStationFreeMemory(
|
||
|
|
IN PVOID pBuffer
|
||
|
|
)
|
||
|
|
/*++
|
||
|
|
Routine Description:
|
||
|
|
Free memory.
|
||
|
|
|
||
|
|
Arguments:
|
||
|
|
[in] pBuffer : Cotains memory location to free.
|
||
|
|
|
||
|
|
Return Value:
|
||
|
|
TRUE if successful else FALSE is returned.
|
||
|
|
--*/
|
||
|
|
{
|
||
|
|
// check the buffer and act
|
||
|
|
if ( NULL == pBuffer )
|
||
|
|
{
|
||
|
|
return TRUE;
|
||
|
|
}
|
||
|
|
// check whether pointer exists or not
|
||
|
|
if ( NULL == m_pfnWinStationFreeMemory )
|
||
|
|
{
|
||
|
|
return FALSE;
|
||
|
|
}
|
||
|
|
// call and return the same
|
||
|
|
return ((FUNC_WinStationFreeMemory) m_pfnWinStationFreeMemory)( pBuffer );
|
||
|
|
}
|
||
|
|
|
||
|
|
|
||
|
|
BOOLEAN
|
||
|
|
CTaskList::WinStationCloseServer(
|
||
|
|
IN HANDLE hServer
|
||
|
|
)
|
||
|
|
/*++
|
||
|
|
Routine Description:
|
||
|
|
Handle to window station is closed.
|
||
|
|
|
||
|
|
Arguments:
|
||
|
|
[in] hServer : Handle to window station.
|
||
|
|
|
||
|
|
Return Value:
|
||
|
|
TRUE if successful else FALSE is returned.
|
||
|
|
--*/
|
||
|
|
{
|
||
|
|
// check the input
|
||
|
|
if ( NULL == hServer )
|
||
|
|
{
|
||
|
|
return TRUE;
|
||
|
|
}
|
||
|
|
// check whether the function pointer exists or not
|
||
|
|
if ( NULL == m_pfnWinStationCloseServer )
|
||
|
|
{
|
||
|
|
return FALSE;
|
||
|
|
}
|
||
|
|
// call and return
|
||
|
|
return ((FUNC_WinStationCloseServer) m_pfnWinStationCloseServer)( hServer );
|
||
|
|
}
|
||
|
|
|
||
|
|
|
||
|
|
HANDLE
|
||
|
|
CTaskList::WinStationOpenServerW(
|
||
|
|
IN LPWSTR pwszServerName
|
||
|
|
)
|
||
|
|
/*++
|
||
|
|
Routine Description:
|
||
|
|
Retrieves a handle to an window station on a system.
|
||
|
|
|
||
|
|
Arguments:
|
||
|
|
[in] pwszServerName : System name from where to retrieve window station handle.
|
||
|
|
|
||
|
|
Return Value:
|
||
|
|
Valid handle is returned if successful else NULL is returned.
|
||
|
|
--*/
|
||
|
|
{
|
||
|
|
// check the input & also check whether function pointer exists or not
|
||
|
|
if ( ( NULL == pwszServerName ) ||
|
||
|
|
( NULL == m_pfnWinStationOpenServerW ) )
|
||
|
|
{
|
||
|
|
return NULL;
|
||
|
|
}
|
||
|
|
// call and return
|
||
|
|
return ((FUNC_WinStationOpenServerW) m_pfnWinStationOpenServerW)( pwszServerName );
|
||
|
|
}
|
||
|
|
|
||
|
|
|
||
|
|
BOOLEAN
|
||
|
|
CTaskList::WinStationEnumerateProcesses(
|
||
|
|
IN HANDLE hServer,
|
||
|
|
OUT PVOID* ppProcessBuffer
|
||
|
|
)
|
||
|
|
/*++
|
||
|
|
Routine Description:
|
||
|
|
Retrieves process running on a system.
|
||
|
|
|
||
|
|
Arguments:
|
||
|
|
[in] hServer : Cotains handle to window station.
|
||
|
|
[ out ] ppProcessBuffer : Contains process infomration on remote system.
|
||
|
|
|
||
|
|
Return Value:
|
||
|
|
TRUE if successful else FALSE is returned.
|
||
|
|
--*/
|
||
|
|
{
|
||
|
|
// check the input and also check whether function pointer exists or not
|
||
|
|
if ( ( NULL == ppProcessBuffer ) ||
|
||
|
|
( NULL == m_pfnWinStationEnumerateProcesses ) )
|
||
|
|
{
|
||
|
|
return FALSE;
|
||
|
|
}
|
||
|
|
// call and return
|
||
|
|
return ((FUNC_WinStationEnumerateProcesses)
|
||
|
|
m_pfnWinStationEnumerateProcesses)( hServer, ppProcessBuffer );
|
||
|
|
}
|
||
|
|
|
||
|
|
|
||
|
|
BOOLEAN
|
||
|
|
CTaskList::WinStationFreeGAPMemory(
|
||
|
|
IN ULONG ulLevel,
|
||
|
|
IN PVOID pProcessArray,
|
||
|
|
IN ULONG ulCount
|
||
|
|
)
|
||
|
|
/*++
|
||
|
|
Routine Description:
|
||
|
|
Free gap memory block.
|
||
|
|
|
||
|
|
Arguments:
|
||
|
|
[in] ulLevel : Contains information level of data.
|
||
|
|
[ in ] pProcessArray : Contains data to be freed.
|
||
|
|
[ in ] ulCount : Contains number of blocks to be freed.
|
||
|
|
|
||
|
|
Return Value:
|
||
|
|
TRUE if successful else FALSE is returned.
|
||
|
|
--*/
|
||
|
|
{
|
||
|
|
// check the input
|
||
|
|
if ( NULL == pProcessArray )
|
||
|
|
{
|
||
|
|
return TRUE;
|
||
|
|
}
|
||
|
|
// check whether function pointer exists or not
|
||
|
|
if ( NULL == m_pfnWinStationFreeGAPMemory )
|
||
|
|
{
|
||
|
|
return FALSE;
|
||
|
|
}
|
||
|
|
// call and return
|
||
|
|
return ((FUNC_WinStationFreeGAPMemory)
|
||
|
|
m_pfnWinStationFreeGAPMemory)( ulLevel, pProcessArray, ulCount );
|
||
|
|
}
|
||
|
|
|
||
|
|
|
||
|
|
BOOLEAN
|
||
|
|
CTaskList::WinStationGetAllProcesses(
|
||
|
|
IN HANDLE hServer,
|
||
|
|
IN ULONG ulLevel,
|
||
|
|
OUT ULONG* pNumberOfProcesses,
|
||
|
|
OUT PVOID* ppProcessArray
|
||
|
|
)
|
||
|
|
/*++
|
||
|
|
Routine Description:
|
||
|
|
Retrieves process information running on a system.
|
||
|
|
|
||
|
|
Arguments:
|
||
|
|
[in] hServer : Cotains handle to window station.
|
||
|
|
[ in ] ulLevel : Contains information level of data.
|
||
|
|
[ out ] pNumberOfProcesses : Contains number of process retrieved.
|
||
|
|
[ out ] ppProcessArray : Contains process realted infomration.
|
||
|
|
|
||
|
|
Return Value:
|
||
|
|
TRUE if successful else FALSE is returned.
|
||
|
|
--*/
|
||
|
|
{
|
||
|
|
// check the input & check whether function pointer exists or not
|
||
|
|
if ( ( NULL == pNumberOfProcesses ) ||
|
||
|
|
( NULL == ppProcessArray ) ||
|
||
|
|
( NULL == m_pfnWinStationGetAllProcesses ) )
|
||
|
|
{
|
||
|
|
return FALSE;
|
||
|
|
}
|
||
|
|
return ((FUNC_WinStationGetAllProcesses)
|
||
|
|
m_pfnWinStationGetAllProcesses)( hServer, ulLevel, pNumberOfProcesses, ppProcessArray );
|
||
|
|
}
|
||
|
|
|
||
|
|
|
||
|
|
BOOLEAN
|
||
|
|
CTaskList::WinStationNameFromLogonIdW(
|
||
|
|
IN HANDLE hServer,
|
||
|
|
IN ULONG ulLogonId,
|
||
|
|
OUT LPWSTR pwszWinStationName
|
||
|
|
)
|
||
|
|
/*++
|
||
|
|
Routine Description:
|
||
|
|
Free memory.
|
||
|
|
|
||
|
|
Arguments:
|
||
|
|
[in] hServer : Cotains handle to window station.
|
||
|
|
[in] ulLogonId : Contains logon ID.
|
||
|
|
[out] pwszWinStationName : Contains window station name.
|
||
|
|
|
||
|
|
Return Value:
|
||
|
|
TRUE if successful else FALSE is returned.
|
||
|
|
--*/
|
||
|
|
{
|
||
|
|
// check the input & check whether function pointer exists or not
|
||
|
|
if( ( NULL == pwszWinStationName ) ||
|
||
|
|
( NULL == m_pfnWinStationNameFromLogonIdW ) )
|
||
|
|
{
|
||
|
|
return FALSE;
|
||
|
|
}
|
||
|
|
|
||
|
|
return ((FUNC_WinStationNameFromLogonIdW)
|
||
|
|
m_pfnWinStationNameFromLogonIdW)( hServer, ulLogonId, pwszWinStationName );
|
||
|
|
}
|