/*
* =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= **
*
*
* =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= **
*/
VOID
cfsd_UserModeDisconnect( IN PVOID ConnectionCookie )
{
UNREFERENCED_PARAMETER( ConnectionCookie );
KdPrint( (PRINT_TAG "Closed ClientPort 0x%X in Process 0x%X\n", gUserModeConnection.ClientPort, gUserModeConnection.UserProcess ) );
// Close our handle to the connection
FltCloseClientPort( gFilterPointer, &gUserModeConnection.ClientPort );
// Reset our UserProcess field
gUserModeConnection.UserProcess = NULL;
}
VOID DisconnectNotifyCallback(IN PVOID ConnectionCookie) {
UNREFERENCED_PARAMETER(ConnectionCookie );
DbgPrint("[+] Debug :: ArmaditoGuard!DisconnectNotifyCallback :: Callback DisconnectNotifyCallback !! \n");
if (gClientComPort != NULL && gFilterHandle != NULL) {
FltCloseClientPort(gFilterHandle,&gClientComPort);
gClientComPort = NULL;
gScanProcess = NULL;
}
return;
}