KeWaitForSingleObject (&queue->QueueResumedEvent, Executive, KernelMode, FALSE, NULL);

item = GetPoolBuffer (queue, sizeof (EncryptedIoQueueItem));

item->Queue = queue;

item->OriginalIrp = irp;

item->Status = STATUS_SUCCESS;

// Create IO request

request = GetPoolBuffer (queue, sizeof (EncryptedIoRequest));

request->Item = item;

request->CompleteOriginalIrp = isLastFragment;

request->Offset = fragmentOffset;

#include <mountdev.h>

#include <ntddvol.h>

/* Init section, which is thrown away as soon as DriverEntry returns */

#pragma alloc_text(INIT,DriverEntry)

#pragma alloc_text(INIT,TCCreateRootDeviceObject)

Dump ("TCCreateRootDeviceObject BEGIN\n");

ASSERT (KeGetCurrentIrql() == PASSIVE_LEVEL);

RtlInitUnicodeString (&ntUnicodeString, ntname);

RtlInitUnicodeString (&Win32NameString, dosname);

Dump ("TCCreateDeviceObject BEGIN\n");

ASSERT (KeGetCurrentIrql() == PASSIVE_LEVEL);

RtlInitUnicodeString (&ntUnicodeString, ntname);

RtlInitUnicodeString (&Win32NameString, dosname);

WCHAR ntName[256];

PMOUNTDEV_NAME outputBuffer = (PMOUNTDEV_NAME) Irp->AssociatedIrp.SystemBuffer;

RtlInitUnicodeString (&ntUnicodeString, ntName);

outputBuffer->NameLength = ntUnicodeString.Length;

UCHAR volId[128], tmp[] = { 0,0 };

PMOUNTDEV_UNIQUE_ID outputBuffer = (PMOUNTDEV_UNIQUE_ID) Irp->AssociatedIrp.SystemBuffer;

tmp[0] = 'A' + (UCHAR) Extension->nDosDriveNo;

outputBuffer->UniqueIdLength = (USHORT) strlen (volId);

outLength = (ULONG) (strlen (volId) + sizeof (USHORT));

break;

}

RtlInitUnicodeString (&ntUnicodeString, ntName);

outLength = FIELD_OFFSET(MOUNTDEV_SUGGESTED_LINK_NAME,Name) + ntUnicodeString.Length;

if (IsVolumeAccessibleByCurrentUser (ListExtension))

{

list->ulMountedDrives |= (1 << ListExtension->nDosDriveNo);

list->diskLength[ListExtension->nDosDriveNo] = ListExtension->DiskLength;

list->ea[ListExtension->nDosDriveNo] = ListExtension->cryptoInfo->ea;

if (ListExtension->cryptoInfo->hiddenVolume)

if (IsVolumeAccessibleByCurrentUser (ListExtension))

{

prop->uniqueId = ListExtension->UniqueVolumeId;

prop->diskLength = ListExtension->DiskLength;

prop->ea = ListExtension->cryptoInfo->ea;

prop->mode = ListExtension->cryptoInfo->mode;

if (memcmp (pThreadBlock->mount->wszVolume, WIDE ("\\Device"), 14) != 0)

{

bDevice = FALSE;

}

else

{

pThreadBlock->wszMountVolume[0] = 0;

bDevice = TRUE;

}

}

}

{

WCHAR tmp[3] =

{0, ':', 0};

int j = nDriveNo + (WCHAR) 'A';

tmp[0] = (short) j;

}

{

WCHAR tmp[3] =

{0, ':', 0};

int j = nDriveNo + (WCHAR) 'A';

tmp[0] = (short) j;

}

#ifdef _DEBUG

IO_STATUS_BLOCK ioStatus;

WCHAR volumeName[TC_MAX_PATH];

RtlInitUnicodeString (&fullFileName, volumeName);

InitializeObjectAttributes (&objectAttributes, &fullFileName, OBJ_CASE_INSENSITIVE | OBJ_KERNEL_HANDLE, NULL, NULL);

UNICODE_STRING deviceName, symLink;

NTSTATUS ntStatus;

RtlInitUnicodeString (&deviceName, dev);

RtlInitUnicodeString (&symLink, link);

UNICODE_STRING symLink;

NTSTATUS ntStatus;

RtlInitUnicodeString (&symLink, link);

ntStatus = IoDeleteSymbolicLink (&symLink);

PMOUNTMGR_CREATE_POINT_INPUT point = (PMOUNTMGR_CREATE_POINT_INPUT) buf;

UNICODE_STRING symName, devName;

in->DeviceNameLength = (USHORT) wcslen (arrVolume) * 2;

ntStatus = TCDeviceIoControl (MOUNTMGR_DEVICE_NAME, IOCTL_MOUNTMGR_VOLUME_ARRIVAL_NOTIFICATION,

in, (ULONG) (sizeof (in->DeviceNameLength) + wcslen (arrVolume) * 2), 0, 0);

memset (buf, 0, sizeof buf);

point->SymbolicLinkNameOffset = sizeof (MOUNTMGR_CREATE_POINT_INPUT);

point->SymbolicLinkNameLength = (USHORT) wcslen ((PWSTR) &point[1]) * 2;

RtlInitUnicodeString(&symName, (PWSTR) (buf + point->SymbolicLinkNameOffset));

point->DeviceNameOffset = point->SymbolicLinkNameOffset + point->SymbolicLinkNameLength;

point->DeviceNameLength = (USHORT) wcslen ((PWSTR) (buf + point->DeviceNameOffset)) * 2;

RtlInitUnicodeString(&devName, (PWSTR) (buf + point->DeviceNameOffset));

memset (buf, 0, sizeof buf);

// Only symbolic link can be deleted with IOCTL_MOUNTMGR_DELETE_POINTS. If any other entry is specified, the mount manager will ignore subsequent IOCTL_MOUNTMGR_VOLUME_ARRIVAL_NOTIFICATION for the same volume ID.

in->SymbolicLinkNameOffset = sizeof (MOUNTMGR_MOUNT_POINT);

WCHAR link[128];

HANDLE handle;

RtlInitUnicodeString (&objectName, link);

InitializeObjectAttributes (&objectAttributes, &objectName, OBJ_KERNEL_HANDLE | OBJ_CASE_INSENSITIVE, NULL, NULL);

void TCStopVolumeThread (PDEVICE_OBJECT DeviceObject, PEXTENSION Extension);

VOID VolumeThreadProc (PVOID Context);

void TCSleep (int milliSeconds);

LPWSTR TCTranslateCode (ULONG ulCode);

void TCDeleteDeviceObject (PDEVICE_OBJECT DeviceObject, PEXTENSION Extension);

VOID TCUnloadDriver (PDRIVER_OBJECT DriverObject);

#pragma warning( disable : 4127 )

volatile BOOL ProbingHostDeviceForWrite = FALSE;

OBJECT_ATTRIBUTES oaParentFileAttributes;

LARGE_INTEGER parentKeyDataOffset;

WIDE ("\\Device\\Harddisk%d\\Partition0"),

mount->nPartitionInInactiveSysEncScopeDriveNo);

{

/* Volume header successfully decrypted */

Dump ("Volume header decrypted\n");

Dump ("Required program version = %x\n", (int) Extension->cryptoInfo->RequiredProgramVersion);

Dump ("Legacy volume = %d\n", (int) Extension->cryptoInfo->LegacyVolume);

if (wcsstr (pwszMountVolume, WIDE ("\\??\\UNC\\")) == pwszMountVolume)

{

/* UNC path */

WIDE ("\\??\\\\%s"),

pwszMountVolume + 7);

}

else

{

}

}