able/windows-nt
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity
windows-nt/Source/XPSP1/NT/base/ntsetup/opktools/setupcl/setupcl.h
CryptoAlgo Inc b3cac27891 Add source files
2020-09-26 16:20:57 +08:00

378 lines
12 KiB
C
Raw Blame History

//
// ============================================================================
// FREQUENTLY USED REGISTRY KEYS
// ============================================================================
//
//
// registry keys and hive names.
//
#define REG_SAM_KEY "\\REGISTRY\\MACHINE\\SAM"
#define REG_SECURITY_KEY "\\REGISTRY\\MACHINE\\SECURITY"
#define REG_SOFTWARE_KEY "\\REGISTRY\\MACHINE\\SOFTWARE"
#define REG_SYSTEM_KEY "\\REGISTRY\\MACHINE\\SYSTEM"
#define REG_SAM_HIVE "\\SYSTEMROOT\\SYSTEM32\\CONFIG\\SAM"
#define REG_SECURITY_HIVE "\\SYSTEMROOT\\SYSTEM32\\CONFIG\\SECURITY"
#define REG_SOFTWARE_HIVE "\\SYSTEMROOT\\SYSTEM32\\CONFIG\\SOFTWARE"
#define REG_SYSTEM_HIVE "\\SYSTEMROOT\\SYSTEM32\\CONFIG\\SYSTEM"
#define REG_SAM_DOMAINS "\\REGISTRY\\MACHINE\\SAM\\SAM\\DOMAINS"
#define REG_SECURITY_POLICY "\\REGISTRY\\MACHINE\\SECURITY\\POLICY"
#define REG_SECURITY_POLACDMS "\\REGISTRY\\MACHINE\\SECURITY\\POLICY\\POLACDMS"
#define REG_SOFTWARE_PROFILELIST "\\REGISTRY\\MACHINE\\SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\PROFILELIST"
#define REG_SOFTWARE_SECEDIT "\\REGISTRY\\MACHINE\\SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\SECEDIT"
#define REG_SOFTWARE_EFS "\\REGISTRY\\MACHINE\\SOFTWARE\\POLICIES\\MICROSOFT\\SYSTEMCERTIFICATES\\EFS"
#define REG_SYSTEM_SERVICES "\\REGISTRY\\MACHINE\\SYSTEM\\CURRENTCONTROLSET\\SERVICES"
#define REG_SYSTEM_CONTROL "\\REGISTRY\\MACHINE\\SYSTEM\\CURRENTCONTROLSET\\CONTROL"
#define REG_SYSTEM_CONTROL_PRINT "\\REGISTRY\\MACHINE\\SYSTEM\\CURRENTCONTROLSET\\CONTROL\\PRINT"
#define REG_SYSTEM_SETUP "\\REGISTRY\\MACHINE\\SYSTEM\\SETUP"
#define REG_SYSTEM_SESSIONMANAGER "\\REGISTRY\\MACHINE\\SYSTEM\\CURRENTCONTROLSET\\CONTROL\\SESSION MANAGER"
#define REG_SYSTEM_HIVELIST "\\REGISTRY\\MACHINE\\SYSTEM\\CURRENTCONTROLSET\\CONTROL\\HIVELIST"
//
// Repair hives
//
#define REPAIR_SAM_KEY "\\REGISTRY\\MACHINE\\RSAM"
#define REPAIR_SECURITY_KEY "\\REGISTRY\\MACHINE\\RSECURITY"
#define REPAIR_SOFTWARE_KEY "\\REGISTRY\\MACHINE\\RSOFTWARE"
#define REPAIR_SYSTEM_KEY "\\REGISTRY\\MACHINE\\RSYSTEM"
#define REPAIR_SAM_HIVE "\\SYSTEMROOT\\REPAIR\\SAM"
#define REPAIR_SECURITY_HIVE "\\SYSTEMROOT\\REPAIR\\SECURITY"
#define REPAIR_SOFTWARE_HIVE "\\SYSTEMROOT\\REPAIR\\SOFTWARE"
#define REPAIR_SYSTEM_HIVE "\\SYSTEMROOT\\REPAIR\\SYSTEM"
#define R_REG_SAM_DOMAINS "\\REGISTRY\\MACHINE\\RSAM\\SAM\\DOMAINS"
#define R_REG_SECURITY_POLICY "\\REGISTRY\\MACHINE\\RSECURITY\\POLICY"
#define R_REG_SOFTWARE_PROFILELIST "\\REGISTRY\\MACHINE\\RSOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\PROFILELIST"
#define R_REG_SOFTWARE_SECEDIT "\\REGISTRY\\MACHINE\\RSOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\SECEDIT"
#define R_REG_SOFTWARE_EFS "\\REGISTRY\\MACHINE\\RSOFTWARE\\POLICIES\\MICROSOFT\\SYSTEMCERTIFICATES\\EFS"
#define R_REG_SYSTEM_CONTROL_PRINT "\\REGISTRY\\MACHINE\\RSYSTEM\\CURRENTCONTROLSET\\CONTROL\\PRINT"
#define R_REG_SYSTEM_SERVICES "\\REGISTRY\\MACHINE\\RSYSTEM\\CURRENTCONTROLSET\\SERVICES"
#define R_REG_SETUP_KEYNAME "\\REGISTRY\\MACHINE\\RSYSTEM\\SETUP"
#define BACKUP_REPAIR_SAM_HIVE "\\SYSTEMROOT\\REPAIR\\DS_SAM"
#define BACKUP_REPAIR_SECURITY_HIVE "\\SYSTEMROOT\\REPAIR\\DS_SECURITY"
#define BACKUP_REPAIR_SOFTWARE_HIVE "\\SYSTEMROOT\\REPAIR\\DS_SOFTWARE"
#define BACKUP_REPAIR_SYSTEM_HIVE "\\SYSTEMROOT\\REPAIR\\DS_SYSTEM"
#define REG_CLONETAG_VALUENAME "CLONETAG"
#define EXECUTE "SETUPEXECUTE"
#define REG_SIZE_LIMIT "REGISTRYSIZELIMIT"
#define PROFILEIMAGEPATH "PROFILEIMAGEPATH"
#define TMP_HIVE_NAME "\\REGISTRY\\MACHINE\\TMPHIVE"
//
// ============================================================================
// CONSTANTS
// ============================================================================
//
#define BASIC_INFO_BUFFER_SIZE (sizeof(KEY_VALUE_BASIC_INFORMATION) + 2048)
// #define PARTIAL_INFO_BUFFER_SIZE (sizeof(KEY_VALUE_PARTIAL_INFORMATION) + 1536)
#define FULL_INFO_BUFFER_SIZE (sizeof(KEY_VALUE_FULL_INFORMATION) + 4096)
#define SID_SIZE (0x18)
#define REGISTRY_QUOTA_BUMP (10 * (1024 * 1024))
#define PROGRAM_NAME "setupcl.exe"
//
// ============================================================================
// USEFUL MACROS
// ============================================================================
//
#define AS(x) ( sizeof(x) / sizeof(x[0]) )
//
// Helper macro to make object attribute initialization a little cleaner.
//
#define INIT_OBJA(Obja,UnicodeString,UnicodeText) \
\
RtlInitUnicodeString((UnicodeString),(UnicodeText)); \
\
InitializeObjectAttributes( \
(Obja), \
(UnicodeString), \
OBJ_CASE_INSENSITIVE, \
NULL, \
NULL \
)
#define PRINT_BLOCK( Block, BlockSize ) \
{ \
ULONG idx1, idx2, idx3; \
idx1 = 0; \
while( idx1 < BlockSize ) { \
DbgPrint( "\t" ); \
for( idx3 = 0; idx3 < 4; idx3++ ) { \
idx2 = 0; \
while( ( idx1 < BlockSize ) && ( idx2 < 4 ) ) { \
DbgPrint( "%02lx", *(PUCHAR)((PUCHAR)Block + idx1) ); \
idx1++; idx2++; \
} \
DbgPrint( " " ); \
} \
DbgPrint( "\n" ); \
} \
}
//
// Helper macro to test the the Status variable. Print
// a message if it's not NT_SUCCESS
//
#define TEST_STATUS( a ) \
if( !NT_SUCCESS( Status ) ) { \
DbgPrint( "%s (%lx)\n", a, Status ); \
}
//
// Helper macro to test the the Status variable. Print
// a message if it's not NT_SUCCESS, then retun Status to
// our caller.
//
#define TEST_STATUS_RETURN( a ) \
if( !NT_SUCCESS( Status ) ) { \
DbgPrint( "%s (%lx)\n", a, Status ); \
return Status; \
}
//
// Helper macro to print the the Status variable. Print
// a message and the Status
//
#define PRINT_STATUS( a ) \
{ \
DbgPrint( "%s (%lx)\n", a, Status ); \
}
//
// ============================================================================
// FUNCTION DECLARATIONS
// ============================================================================
//
extern NTSTATUS
DeleteKey(
PWSTR Key
);
extern NTSTATUS
DeleteKeyRecursive(
HANDLE hKeyRoot,
PWSTR Key
);
extern NTSTATUS
FileDelete(
IN WCHAR *FileName
);
extern NTSTATUS
FileCopy(
IN WCHAR *TargetName,
IN WCHAR *SourceName
);
extern NTSTATUS
SetKey(
IN WCHAR *KeyName,
IN WCHAR *SubKeyName,
IN CHAR *Data,
IN ULONG DataLength,
IN ULONG DATA_TYPE
);
extern NTSTATUS
ReadSetWriteKey(
IN WCHAR *ParentKeyName, OPTIONAL
IN HANDLE ParentKeyHandle, OPTIONAL
IN WCHAR *SubKeyName,
IN CHAR *OldData,
IN CHAR *NewData,
IN ULONG DataLength,
IN ULONG DATA_TYPE
);
extern NTSTATUS
LoadUnloadHive(
IN PWSTR KeyName,
IN PWSTR FileName
);
extern NTSTATUS
BackupRepairHives(
VOID
);
extern NTSTATUS
CleanupRepairHives(
NTSTATUS RepairHivesSuccess
);
extern NTSTATUS
TestSetSecurityObject(
HANDLE hKey
);
extern NTSTATUS
SetKeySecurityRecursive(
HANDLE hKey
);
extern NTSTATUS
CopyKeyRecursive(
HANDLE hKeyDst,
HANDLE hKeySrc
);
extern NTSTATUS
CopyRegKey(
IN WCHAR *TargetName,
IN WCHAR *SourceName,
IN HANDLE ParentKeyHandle OPTIONAL
);
extern NTSTATUS
MoveRegKey(
IN WCHAR *TargetName,
IN WCHAR *SourceName
);
extern NTSTATUS
FindAndReplaceBlock(
IN PCHAR Block,
IN ULONG BlockLength,
IN PCHAR OldValue,
IN PCHAR NewValue,
IN ULONG ValueLength
);
extern NTSTATUS
StringSwitchString(
PWSTR BaseString,
DWORD cBaseStringLen,
PWSTR OldSubString,
PWSTR NewSubString
);
extern NTSTATUS
SiftKeyRecursive(
HANDLE hKey,
int indent
);
extern NTSTATUS
SiftKey(
PWSTR KeyName
);
extern NTSTATUS
ProcessSAMHive(
VOID
);
extern NTSTATUS
ProcessSECURITYHive(
VOID
);
extern NTSTATUS
ProcessSOFTWAREHive(
VOID
);
extern NTSTATUS
ProcessSYSTEMHive(
VOID
);
extern NTSTATUS
ProcessRepairSAMHive(
VOID
);
extern NTSTATUS
ProcessRepairSECURITYHive(
VOID
);
extern NTSTATUS
ProcessRepairSOFTWAREHive(
VOID
);
extern NTSTATUS
ProcessRepairSYSTEMHive(
VOID
);
extern NTSTATUS
RetrieveOldSid(
VOID
);
extern NTSTATUS
GenerateUniqueSid(
IN DWORD Seed
);
extern NTSTATUS
EnumerateDrives(
VOID
);
extern NTSTATUS
DriveLetterToNTPath(
IN WCHAR DriveLetter,
IN OUT PWSTR NTPath,
IN DWORD cNTPathLen
);
// ============================================================================
// GLOBAL VARIABLES
// ============================================================================
//
// These globals hold the OldSid (the one prior to the clone)
// and the NewSid (the one we generate and spray into the
// registry).
//
PSID G_OldSid,
G_NewSid;
//
// These guys will hold small strings that contain the text character
// versions of the 3 unique numbers that make up the domain SID.
//
WCHAR G_OldSidSubString[MAX_PATH * 4];
WCHAR G_NewSidSubString[MAX_PATH * 4];
WCHAR TmpBuffer[MAX_PATH * 4];
//
// Disable the DbgPrint for non-debug builds
//
#ifndef DBG
#define DbgPrint DbgPrintSub
void DbgPrintSub(char *szBuffer, ...);
#endif
//
// UI related constants and functions.
//
// 14 seconds in 100ns units. (OOBE wanted 15secs, but it seems like it takes ~1-2 sec to initialize setupcl)
//
#define UITIME 140000000
#define UIDOTTIME 30000000 // 3 seconds in 100ns units
extern __inline void
DisplayUI();
extern BOOL
LoadStringResource(
PUNICODE_STRING pUnicodeString,
INT MsgId
);
Reference in a new issue View git blame Copy permalink