webshell

Ghost Exploiter Team Official

File / Folder	Size	Action
.	-
en-US	--	ren
CL_DetectingDevice.ps1	5.088KB	edt ren
CL_Utility.ps1	43.915KB	edt ren
DB_DeviceErrorLibrary.ps1	5.084KB	edt ren
DiagPackage.diagpkg	30.874KB	edt ren
DiagPackage.dll	64KB	edt ren
RS_CheckDriversOnInstal...	2.8KB	edt ren
RS_DeviceDriverNeedsUpd...	2.829KB	edt ren
RS_DriverNotFound.ps1	2.748KB	edt ren
RS_EnableDevice.ps1	1.542KB	edt ren
RS_InformCustomer.ps1	6.561KB	edt ren
RS_PendingRestart.ps1	0.385KB	edt ren
RS_RescanAllDevices.ps1	0.814KB	edt ren
TS_CheckDriversOnInstal...	1.735KB	edt ren
TS_DeviceDisabled.ps1	2.688KB	edt ren
TS_DeviceDriverNeedsUpd...	3.314KB	edt ren
TS_DriverNotFound.ps1	3.352KB	edt ren
TS_HardwareDeviceMain.ps1	4.546KB	edt ren
TS_InformCustomer.ps1	3.26KB	edt ren
TS_NotWorkingProperly.ps1	3.214KB	edt ren
TS_PendingRestart.ps1	1.849KB	edt ren
TS_RescanAllDevices.ps1	1.33KB	edt ren
VF_RescanAllDevices.ps1	0.972KB	edt ren

#CL_DetectingDevice
Import-LocalizedData -BindingVariable localizationString -FileName CL_LocalizationData

. .\DB_DeviceErrorLibrary.ps1
. .\CL_Utility.ps1

function DetectingDeviceFromPnPEntity()
{
    $HashProblemDeviceTable = New-Object System.Collections.HashTable
    if($HashProblemDeviceTable -eq $Null)
    {
        return $False
    }

$PnPObjects = Get-WmiObject -Class Win32_PnPEntity

foreach($DeviceItem in $PnPObjects)
    {
        [string]$DeviceName = $DeviceItem.Name
        [string]$DeviceID = $DeviceItem.PNPDeviceID
        [string]$DeviceErrorCode = $DeviceItem.ConfigManagerErrorCode

if(($DeviceName -eq $Null) -or ($DeviceID -eq $Null) -or ($DeviceErrorCode -eq $Null))
        {
            continue
        }

if($DeviceID -eq "")
        {
            continue
        }
        # Checking Error Code 45 for not connected device for Windows 10
        if(($DeviceErrorCode -ne "0") -and ($DeviceErrorCode -ne "45"))
        {
            if($HashProblemDeviceTable.Contains($DeviceID) -eq $False)
            {
                $HashProblemDeviceTable.Add($DeviceID, $DeviceID)
            }
        }
    }

return $HashProblemDeviceTable
}

Function Get-ErrorCodeStringMapping($deviceID)
{
	$deviceDetails = @()
	$ProblemDevice = $null
 try
	{
	   $ProblemDevice = Get-WmiObject -Class Win32_PnPEntity | Where-Object -FilterScript {$_.DeviceID -eq $deviceID}
		if(($ProblemDevice -ne $Null) -and ($ProblemDevice.ConfigManagerErrorCode -ne $Null))
		{
			[string]$DeviceName = $ProblemDevice.Name
			[string]$ErrorCode = $ProblemDevice.ConfigManagerErrorCode

# Check Disabled
			if($HashDisabled.Contains($ErrorCode) -eq $True)
			{
				$devDescription = $localizationString.DeviceDisable
				$devDescription = $devDescription -replace ("%DEVICENAME%",$DeviceName)
				$devValue = "$deviceID#$ErrorCode"
				$deviceDetails += @{"Name" = $devDescription; "Value" = $devValue}
			}
			# Check if driver not found
			elseif(($HashDriverNotFound.Contains($ErrorCode) -eq $True) -or ((DriverNotFound $DeviceID) -eq $true)) 
			{
				$devDescription = $localizationString.DriverNotFound
				$devDescription = $devDescription -replace ("%DEVICENAME%",$DeviceName)
				$devValue = "$deviceID#$ErrorCode"
				$deviceDetails += @{"Name" = $devDescription; "Value" = $devValue}
			}
			# Check if driver has problem
			elseif(($HashUpdateDriver.Contains($ErrorCode) -eq $True)) 
			{
				$devDescription = $localizationString.UpdateDriver
				$devDescription = $devDescription -replace ("%DEVICENAME%",$DeviceName)
				$devValue = "$deviceID#$ErrorCode"
				$deviceDetails += @{"Name" = $devDescription; "Value" = $devValue}
			}
			# $HashDeviceErrors is related to RC_NotWorkingproperly.
			elseif(($HashDeviceErrors.Contains($ErrorCode) -eq $True)) 
			{
				$devDescription = $localizationString.DeviceError
				$devDescription = $devDescription -replace ("%DEVICENAME%",$DeviceName)
				$devValue = "$deviceID#$ErrorCode"
				$deviceDetails += @{"Name" = $devDescription; "Value" = $devValue}
			}
			# $HashInformCx is related to RC_InformCX
			elseif(($HashInformCx.Contains($ErrorCode) -eq $True)) 
			{
				$devDescription = $localizationString.DeviceError
				$devDescription = $devDescription -replace ("%DEVICENAME%",$DeviceName)
				$devValue = "$deviceID#$ErrorCode"
				$deviceDetails += @{"Name" = $devDescription; "Value" = $devValue}
			}

}
		return $deviceDetails
	}
	Catch [System.Exception]
	{
		Write-ExceptionTelemetry "Get-ErrorCodeStringMapping" $ErrorCode $_
		$errorMsg =  $_.Exception.Message
		$errorMsg | ConvertTo-Xml | Update-DiagReport -Id "CL_DetectingDevice" -Name "CL_DetectingDevice" -Verbosity Debug
	} 
	
}

Function Get-HiddenDevices()
{
    <#
    DESCRIPTION:
      List all hidden devices(only for Windows10(build 10586 onwards))
	ARGUMENTS:
	  None
	RETURN:
	  Returns list of hidden devices with friendly names
    #>
	$allHiddenDevice = @()
    $allHiddenDeviceList = @()
    $hiddendeviceChoices = @()
	$hiddenDevList = Get-PnpDevice | Get-PnpDeviceProperty -KeyName 'DEVPKEY_Device_IsPresent' | ?{$_.Data -eq $false}
	if($hiddenDevList.Count -ge 1)
	{
		foreach($hiddenid in $hiddenDevList.InstanceID)
		{
		  $allHiddenDevice += Get-PnpDevice | Where-Object -FilterScript {$_.InstanceId -eq $hiddenid}
		}
		foreach($hiddendev in $allHiddenDevice.InstanceID)
		{
		  $HiddenDevice = Get-PnpDevice | Where-Object -FilterScript {$_.InstanceId -eq $hiddendev}
		  $allHiddenDeviceList += $HiddenDevice.FriendlyName 
		}
		# Remove duplicate hidden devices 
		$allHiddenDeviceList = $allHiddenDeviceList | Select -Unique
		# Creating final list of hidden devices
		foreach($choice in $allHiddenDeviceList)
		{
		  $devDescription = $localizationString.HiddenDevice
		  $devDescription = $devDescription -replace ("%DEVICENAME%",$choice)
		  $hiddendeviceChoices +=  @{"Name" = $devDescription; "Value" = $choice; "Description" = ""; "ExtensionPoint" = ""}
		}
    }
	return $hiddendeviceChoices
}

<=Back