|
|
/*++
Copyright (c) 2002 Microsoft Corporation
Module Name:
InstantCDDVD.cpp
Abstract:
Clean up the filter drivers on the uninstaller on process termination.
Notes:
This is an app specific shim.
History:
08/20/2002 mnikkel Created
--*/
#include "precomp.h"
IMPLEMENT_SHIM_BEGIN(InstantCDDVD) #include "ShimHookMacro.h"
APIHOOK_ENUM_BEGIN APIHOOK_ENUM_END
BOOL StripStringFromValue(HKEY hKey, const WCHAR *lpValue, const WCHAR *lpStrip) { DWORD dwType, dwSize; BOOL bRet = FALSE; WCHAR *lpString = NULL;
//
// Build the %systemdir%\drivers\filename.sys to see if it's available
//
CString csSystem; CSTRING_TRY { csSystem.GetSystemDirectoryW(); csSystem += L"\\Drivers\\"; csSystem += lpStrip; csSystem += L".sys"; } CSTRING_CATCH { goto Exit; }
//
// Check to see if the file exists - if it does, we don't touch the registry
//
if (GetFileAttributesW(csSystem) != 0xFFFFFFFF) { DPFN(eDbgLevelError, "%S found so leave registry value alone", lpStrip); goto Exit; }
//
// Checking the registry for the bad state now
//
// Get the size
if (ERROR_SUCCESS != RegQueryValueExW(hKey, lpValue, NULL, &dwType, NULL, &dwSize)) { DPFN(eDbgLevelError, "%S value not found", lpValue); goto Exit; }
// Make sure it's a MULTI_STRING
if (dwType != REG_MULTI_SZ) { DPFN(eDbgLevelError, "%S not correct type, expecting a multi-string", lpStrip); goto Exit; }
// Allocate memory for it and clear it
lpString = (WCHAR *) malloc(dwSize); if (!lpString) { DPFN(eDbgLevelError, "Out of memory"); goto Exit; } ZeroMemory(lpString, dwSize);
// Get the actual data
if (ERROR_SUCCESS != RegQueryValueExW(hKey, lpValue, NULL, &dwType, (LPBYTE)lpString, &dwSize)) { DPFN(eDbgLevelError, "%S QueryValue failed unexpectedly", lpStrip); goto Exit; }
// Allocate an output buffer
WCHAR * lpNewString = (WCHAR *) malloc(dwSize); if (!lpNewString) { DPFN(eDbgLevelError, "Out of memory"); goto Exit; } ZeroMemory(lpNewString, dwSize);
// Run the input buffer looking for lpStrip
WCHAR *lpCurr = lpString; WCHAR *lpCurrOut = lpNewString; BOOL bStripped = FALSE; while (*lpCurr) { if (_wcsicmp(lpCurr, lpStrip) != 0) { // Keep this entry
if (StringCchCopyW(lpCurrOut, dwSize, lpCurr) != S_OK) { goto Exit; } lpCurrOut += wcslen(lpCurrOut) + 1; dwSize -= wcslen(lpCurrOut) + 1; } else { // Remove this entry
bStripped = TRUE; }
lpCurr += wcslen(lpCurr) + 1; }
if (bStripped) { //
// Fix up the registry with the new value. If there's nothing left, then kill the
// value.
//
LOGN(eDbgLevelError, "Removing filter driver - Value: %S, Name: %S", lpValue, lpStrip);
dwSize = (lpCurrOut - lpNewString) * sizeof(WCHAR); if (dwSize == 0) { RegDeleteValueW(hKey, lpValue); } else { RegSetValueExW(hKey, lpValue, NULL, dwType, (LPBYTE) lpNewString, dwSize + sizeof(WCHAR)); } }
bRet = TRUE;
Exit:
if (lpString) { free(lpString); }
if (lpNewString) { free(lpNewString); }
return bRet; }
/*++
Register hooked functions
--*/
BOOL NOTIFY_FUNCTION(DWORD fdwReason) { if (fdwReason == DLL_PROCESS_DETACH) {
HKEY hKey;
if (ERROR_SUCCESS == RegOpenKeyW(HKEY_LOCAL_MACHINE, L"SYSTEM\\CurrentControlSet\\Control\\Class\\{4D36E965-E325-11CE-BFC1-08002BE10318}", &hKey)) {
StripStringFromValue(hKey, L"UpperFilters", L"ASAPI"); StripStringFromValue(hKey, L"UpperFilters", L"CDRDRV"); RegCloseKey(hKey); } }
return TRUE; }
HOOK_BEGIN
CALL_NOTIFY_FUNCTION
HOOK_END
IMPLEMENT_SHIM_END
|