воскресенье, 30 июня 2013 г.

WdfFunctions.idc patch for w8.1 preview

Some time ago I wrote simple script for finding _WDFFUNCTIONS in KMDF based drivers. It seems that Wdf01000.sys!_WDFFUNCTIONS from windows 8.1 preview has some additional fields, so I just added their to my script:


      AddStrucMember(id,"pfnWdfInterruptReportInactive",    0X6B4,    0x20000400,    -1,    4);
      AddStrucMember(id,"pfnWdfDeviceInitSetReleaseHardwareOrderOnFailure",    0X6B8,    0x20000400,    -1,    4);
      AddStrucMember(id,"pfnWdfGetTriageInfo",    0X6BC,    0x20000400,    -1,    4);
+   if ( size == 0x1b0 ) // w8
+     return id;
+         AddStrucMember(id,"pfnWdfDeviceInitSetIoTypeEx",    0X6C0,    0x20000400,    -1,    4);
+         AddStrucMember(id,"pfnWdfDeviceQueryPropertyEx",    0X6C4,    0x20000400,    -1,    4);
+         AddStrucMember(id,"pfnWdfDeviceAllocAndQueryPropertyEx",0X6C8,    0x20000400,    -1,    4);
+         AddStrucMember(id,"pfnWdfDeviceAssignProperty",        0X6CC,    0x20000400,    -1,    4);
+         AddStrucMember(id,"pfnWdfFdoInitQueryPropertyEx",    0X6D0,    0x20000400,    -1,    4);
+         AddStrucMember(id,"pfnWdfFdoInitAllocAndQueryPropertyEx",    0X6D4,    0x20000400,    -1,    4);
    return id;
  }

Комментариев нет:

Отправить комментарий