Method Refresh

WinArk/MiniFilterOperationTable.cpp:260–315

void COperationTable::Refresh() {
	m_Table.data.n = 0;
	m_Table.data.info.clear();

	ULONG offset = SymbolHelper::GetFltmgrStructMemberOffset("_FLT_FILTER", "Operations");

	auto len = (ULONG)m_Name.length();
	DWORD size = len * sizeof(WCHAR) + sizeof(MiniFilterData);

	auto pData = std::make_unique<BYTE[]>(size);
	if (!pData)
		return;

	auto data = reinterpret_cast<MiniFilterData*>(pData.get());
	data->OperationsOffset = offset;
	data->Length = len;
	::wcscpy_s(data->Name, len + 1, m_Name.c_str());

	DWORD dataSize = size;

	int maxCount = IRP_MJ_MAXIMUM_FUNCTION + FLT_INTERNAL_OPERATION_COUNT;
	size = maxCount * sizeof(OperationInfo);
	wil::unique_virtualalloc_ptr<> buffer(::VirtualAlloc(nullptr, size, MEM_COMMIT, PAGE_READWRITE));
	OperationInfo* p = (OperationInfo*)buffer.get();

	if (p != nullptr) {
		memset(p, 0, size);
		DriverHelper::EnumMiniFilterOperations(data, dataSize,p, size);
		for (int i = 0; (p->MajorFunction != IRP_MJ_OPERATION_END&& i<maxCount); i++) {
			OperationCallbackInfo info;
			info.Module = Helpers::GetKernelModuleByAddress((ULONG_PTR)p->PostOperation);
			std::wstring path = Helpers::StringToWstring(info.Module);
			info.Company = FileVersionInfoHelpers::GetCompanyName(path);
			info.Routine = p->PostOperation;
			info.FilterHandle = p->FilterHandle;
			info.Flags = p->Flags;
			info.MajorCode = p->MajorFunction;
			info.Type = FilterType::PostOperation;
			m_Table.data.info.push_back(info);

			info.Module = Helpers::GetKernelModuleByAddress((ULONG_PTR)p->PreOperation);
			path = Helpers::StringToWstring(info.Module);
			info.Company = FileVersionInfoHelpers::GetCompanyName(path);
			info.Routine = p->PreOperation;
			info.FilterHandle = p->FilterHandle;
			info.Flags = p->Flags;
			info.MajorCode = p->MajorFunction;
			info.Type = FilterType::PreOperation;
			m_Table.data.info.push_back(info);
			p++;
		}
	}


	m_Table.data.n = m_Table.data.info.size();
}

std::wstring COperationTable::GetSingleOperationInfo(OperationCallbackInfo& info) {