#include "brian.h" typedef struct _ASYNC_READ { USHORT FileIndex; BOOLEAN UseEvent; PIO_APC_ROUTINE ApcRoutine; PVOID ApcContext; PUSHORT BufferIndexPtr; USHORT BufferIndex; ULONG Length; PLARGE_INTEGER ByteOffsetPtr; LARGE_INTEGER ByteOffset; PULONG KeyPtr; ULONG Key; BOOLEAN DisplayParms; BOOLEAN VerboseResults; USHORT AsyncIndex; } ASYNC_READ, *PASYNC_READ; #define USE_EVENT_DEFAULT TRUE #define APC_ROUTINE_DEFAULT NULL #define APC_CONTEXT_DEFAULT NULL #define READ_LENGTH_DEFAULT 100L #define DISPLAY_PARMS_DEFAULT FALSE #define VERBOSE_RESULTS_DEFAULT FALSE VOID FullRead( IN OUT PASYNC_READ AsyncRead ); VOID InputRead( IN PCHAR ParamBuffer ) { ULONG FileIndex; BOOLEAN UseEvent; PIO_APC_ROUTINE ApcRoutine; PVOID ApcContext; PUSHORT BufferIndexPtr; USHORT BufferIndex; ULONG Length; PLARGE_INTEGER ByteOffsetPtr; LARGE_INTEGER ByteOffset; PULONG KeyPtr; ULONG Key; BOOLEAN DisplayParms; BOOLEAN VerboseResults; USHORT AsyncIndex; BOOLEAN ParamReceived; BOOLEAN LastInput; // // Set the defaults. // UseEvent = USE_EVENT_DEFAULT; ApcRoutine = APC_ROUTINE_DEFAULT; ApcContext = APC_CONTEXT_DEFAULT; BufferIndexPtr = NULL; BufferIndex = 0; Length = READ_LENGTH_DEFAULT; ByteOffsetPtr = NULL; ByteOffset = RtlConvertUlongToLargeInteger( 0L ); KeyPtr = NULL; Key = 0; DisplayParms = DISPLAY_PARMS_DEFAULT; VerboseResults = VERBOSE_RESULTS_DEFAULT; AsyncIndex = 0; ParamReceived = FALSE; LastInput = TRUE; // // While there is more input, analyze the parameter and update the // query flags. // while (TRUE) { ULONG DummyCount; ULONG TempIndex; // // Swallow leading white spaces. // ParamBuffer = SwallowWhite( ParamBuffer, &DummyCount ); if (*ParamBuffer) { // // If the next parameter is legal then check the paramter value. // Update the parameter value. // if ((*ParamBuffer == '-' || *ParamBuffer == '/') && (ParamBuffer++, *ParamBuffer != '\0')) { // // Switch on the next character. // switch (*ParamBuffer) { // // Update the buffer index. // case 'b' : case 'B' : // // Move to the next character, as long as there // are no white spaces continue analyzing letters. // On the first bad letter, skip to the next // parameter. // ParamBuffer++; TempIndex = AsciiToInteger( ParamBuffer ); BufferIndex = (USHORT) TempIndex; BufferIndexPtr = &BufferIndex; ParamBuffer = SwallowNonWhite( ParamBuffer, &DummyCount ); break; // // Update the byte count. // case 'l' : case 'L' : // // Move to the next character, as long as there // are no white spaces continue analyzing letters. // On the first bad letter, skip to the next // parameter. // ParamBuffer++; Length = AsciiToInteger( ParamBuffer ); ParamBuffer = SwallowNonWhite( ParamBuffer, &DummyCount ); break; // // Update the file handle index. // case 'i' : case 'I' : // // Move to the next character, as long as there // are no white spaces continue analyzing letters. // On the first bad letter, skip to the next // parameter. // ParamBuffer++; FileIndex = AsciiToInteger( ParamBuffer ); ParamBuffer = SwallowNonWhite( ParamBuffer, &DummyCount ); ParamReceived = TRUE; break; // // Update the key value. // case 'k' : case 'K' : // // Move to the next character, as long as there // are no white spaces continue analyzing letters. // On the first bad letter, skip to the next // parameter. // ParamBuffer++; Key = AsciiToInteger( ParamBuffer ); KeyPtr = &Key; ParamBuffer = SwallowNonWhite( ParamBuffer, &DummyCount ); break; // // Update the offset of the read. // case 'o' : case 'O' : // // Move to the next character, as long as there // are no white spaces continue analyzing letters. // On the first bad letter, skip to the next // parameter. // ParamBuffer++; ByteOffset.QuadPart = AsciiToLargeInteger( ParamBuffer ); ByteOffsetPtr = &ByteOffset; ParamBuffer = SwallowNonWhite( ParamBuffer, &DummyCount ); break; // // Check whether we should use an event to signal // completion. // case 'e' : case 'E' : // // Legal values for use event are T/t or F/f. // ParamBuffer++; if (*ParamBuffer == 'T' || *ParamBuffer == 't') { UseEvent = TRUE; ParamBuffer++; } else if (*ParamBuffer == 'F' || *ParamBuffer == 'f') { UseEvent = FALSE; ParamBuffer++; } break; case 'v' : case 'V' : // // Legal values for params are T/t or F/f. // ParamBuffer++; if( *ParamBuffer == 'T' || *ParamBuffer == 't' ) { VerboseResults = TRUE; ParamBuffer++; } else if( *ParamBuffer == 'F' || *ParamBuffer == 'f' ) { VerboseResults = FALSE; ParamBuffer++; } break; case 'y' : case 'Y' : // // Set the display parms flag and jump over this // character. // DisplayParms = TRUE; ParamBuffer = SwallowNonWhite( ParamBuffer, &DummyCount ); break; case 'z' : case 'Z' : // // Set flag for more input and jump over this char. // LastInput = FALSE; ParamBuffer = SwallowNonWhite( ParamBuffer, &DummyCount ); break; default : // // Swallow to the next white space and continue the // loop. // ParamBuffer = SwallowNonWhite( ParamBuffer, &DummyCount ); } } // // Else the text is invalid, skip the entire block. // // // // Else if there is no input then exit. // } else if( LastInput ) { break; // // Else try to read another line for open parameters. // } else { } } // // If no parameters were received then display the syntax message. // if (!ParamReceived) { printf( "\n Usage: rd [options]* -i [options]*\n" ); printf( "\n Options:" ); printf( "\n -i File index" ); printf( "\n -l Read length" ); printf( "\n -b Buffer index" ); printf( "\n -k Locked bytes key value" ); printf( "\n -o Read offset" ); printf( "\n -e[t|f] Use event on completion" ); printf( "\n -v[t|f] Verbose results" ); printf( "\n -y Display parameters to query" ); printf( "\n -z Additional input line" ); printf( "\n\n" ); // // Else call our read routine. // } else { NTSTATUS Status; SIZE_T RegionSize; ULONG TempIndex; PASYNC_READ AsyncRead; HANDLE ThreadHandle; ULONG ThreadId; RegionSize = sizeof( ASYNC_READ ); Status = AllocateBuffer( 0, &RegionSize, &TempIndex ); AsyncIndex = (USHORT) TempIndex; if (!NT_SUCCESS( Status )) { printf("\n\tInputRead: Unable to allocate async structure" ); } else { AsyncRead = (PASYNC_READ) Buffers[AsyncIndex].Buffer; AsyncRead->FileIndex = (USHORT) FileIndex; AsyncRead->UseEvent = UseEvent; AsyncRead->ApcRoutine = ApcRoutine; AsyncRead->ApcContext = ApcContext; AsyncRead->BufferIndex = BufferIndex; AsyncRead->BufferIndexPtr = BufferIndexPtr ? &AsyncRead->BufferIndex : BufferIndexPtr; AsyncRead->Length = Length; AsyncRead->ByteOffset = ByteOffset; AsyncRead->ByteOffsetPtr = ByteOffsetPtr ? &AsyncRead->ByteOffset : ByteOffsetPtr; AsyncRead->Key = Key; AsyncRead->KeyPtr = KeyPtr ? &AsyncRead->Key : KeyPtr; AsyncRead->DisplayParms = DisplayParms; AsyncRead->VerboseResults = VerboseResults; AsyncRead->AsyncIndex = AsyncIndex; if (!SynchronousCmds) { ThreadHandle = CreateThread( NULL, 0, FullRead, AsyncRead, 0, &ThreadId ); if (ThreadHandle == 0) { printf( "\nInputRead: Spawning thread fails -> %d\n", GetLastError() ); return; } } else { FullRead( AsyncRead ); } } } return; } VOID FullRead( IN OUT PASYNC_READ AsyncRead ) { NTSTATUS Status; IO_STATUS_BLOCK Iosb; HANDLE ThisEvent; USHORT ThisEventIndex; USHORT ThisBufferIndex; BOOLEAN UnwindReadBuffer = FALSE; BOOLEAN UnwindEvent = FALSE; Status = STATUS_SUCCESS; if (AsyncRead->DisplayParms) { bprint "\nRead Parameters" ); bprint "\n File Handle Index -> %d", AsyncRead->FileIndex ); bprint "\n UseEvent -> %d", AsyncRead->UseEvent ); bprint "\n ApcRoutine -> %08lx", AsyncRead->ApcRoutine ); bprint "\n ApcContext -> %08lx", AsyncRead->ApcContext ); bprint "\n Buffer Index Ptr -> %08lx", AsyncRead->BufferIndexPtr ); if (AsyncRead->BufferIndexPtr) { bprint "\n BufferIndex value -> %04x", AsyncRead->BufferIndex ); } bprint "\n Length -> %08lx", AsyncRead->Length ); bprint "\n Byte Offset Ptr -> %08lx", AsyncRead->ByteOffsetPtr ); if (AsyncRead->ByteOffsetPtr) { bprint "\n Byte Offset High -> %08lx", AsyncRead->ByteOffset.HighPart ); bprint "\n Byte Offset Low -> %08lx", AsyncRead->ByteOffset.LowPart ); } bprint "\n Key Ptr -> %08lx", AsyncRead->KeyPtr ); if (AsyncRead->KeyPtr) { bprint "\n Key -> %ul", AsyncRead->Key ); } bprint "\n\n" ); } try { SIZE_T ThisLength; // // If we need a buffer, allocate it now. // if (AsyncRead->BufferIndexPtr == NULL) { ULONG TempIndex; ThisLength = AsyncRead->Length; Status = AllocateBuffer( 0L, &ThisLength, &TempIndex ); ThisBufferIndex = (USHORT) TempIndex; if (!NT_SUCCESS( Status )) { bprint "\n\tFullRead: Unable to allocate a read buffer" ); try_return( Status ); } bprint "\n\tFullRead: Reading into buffer -> %04x", ThisBufferIndex ); bprint "\n" ); UnwindReadBuffer = TRUE; } else { ThisBufferIndex = AsyncRead->BufferIndex; } // // Check that the buffer index is valid. // if (ThisBufferIndex >= MAX_BUFFERS) { bprint "\n\tFullRead: The read buffer index is invalid" ); try_return( Status = STATUS_INVALID_HANDLE ); } // // Check that the file index is valid. // if (AsyncRead->FileIndex >= MAX_HANDLES) { bprint "\n\tFullRead: The file index is invalid" ); try_return( Status = STATUS_INVALID_HANDLE ); } // // If we need an event, allocate and set it now. // if (AsyncRead->UseEvent == TRUE) { Status = ObtainEvent( &ThisEventIndex ); if (!NT_SUCCESS( Status )) { bprint "\n\tFullRead: Unable to allocate an event" ); try_return( Status ); } UnwindEvent = TRUE; ThisEvent = Events[ThisEventIndex].Handle; } else { ThisEvent = 0; } // // Call the read routine. // Status = NtReadFile( Handles[AsyncRead->FileIndex].Handle, ThisEvent, AsyncRead->ApcRoutine, AsyncRead->ApcContext, &Iosb, Buffers[ThisBufferIndex].Buffer, AsyncRead->Length, AsyncRead->ByteOffsetPtr, AsyncRead->KeyPtr ); UnwindReadBuffer = FALSE; if (AsyncRead->VerboseResults) { bprint "\nReadFile: Status -> %08lx", Status ); if (AsyncRead->UseEvent && NT_SUCCESS( Status )) { if ((Status = NtWaitForSingleObject( ThisEvent, FALSE, NULL )) != STATUS_SUCCESS) { bprint "\n\tReadFile: Wait for event failed -> %08lx", Status ); bprint "\n" ); try_return( Status ); } } if (NT_SUCCESS( Status )) { bprint "\n Iosb.Information -> %08lx", Iosb.Information ); bprint "\n Iosb.Status -> %08lx", Iosb.Status ); } bprint "\n" ); } try_return( Status ); try_exit: NOTHING; } finally { if (UnwindReadBuffer) { DeallocateBuffer( ThisBufferIndex ); } if (UnwindEvent) { FreeEvent( ThisEventIndex ); } DeallocateBuffer( AsyncRead->AsyncIndex ); } if (!SynchronousCmds) { NtTerminateThread( 0, STATUS_SUCCESS ); } }