main.c File Reference

#include <kph.h>
#include <dyndata.h>

Go to the source code of this file.

Functions
	__drv_dispatchType (IRP_MJ_CREATE)
VOID	DriverUnload (__in PDRIVER_OBJECT DriverObject)
NTSTATUS	KphDispatchCreate (__in PDEVICE_OBJECT DeviceObject, __in PIRP Irp)
ULONG	KphpReadIntegerParameter (__in_opt HANDLE KeyHandle, __in PUNICODE_STRING ValueName, __in ULONG DefaultValue)
	Reads an integer (REG_DWORD) parameter from the registry.
NTSTATUS	KphpReadDriverParameters (__in PUNICODE_STRING RegistryPath)
	Reads the driver parameters.
NTSTATUS	KpiGetFeatures (__out PULONG Features, __in KPROCESSOR_MODE AccessMode)
NTSTATUS	KphEnumerateSystemModules (__out PRTL_PROCESS_MODULES *Modules)
	Enumerates the modules loaded by the kernel.
NTSTATUS	KphValidateAddressForSystemModules (__in PVOID Address, __in SIZE_T Length)
	Checks if an address range lies within a kernel module.

Variables
DRIVER_INITIALIZE	DriverEntry
DRIVER_UNLOAD	DriverUnload

Function Documentation

__drv_dispatchType

(

IRP_MJ_CREATE

)

Definition at line 27 of file main.c.

VOID DriverUnload

(

__in PDRIVER_OBJECT

DriverObject

)

Definition at line 105 of file main.c.

NTSTATUS KphDispatchCreate	(	__in PDEVICE_OBJECT	DeviceObject,
		__in PIRP	Irp
	)

Definition at line 116 of file main.c.

NTSTATUS KphEnumerateSystemModules

(

__out PRTL_PROCESS_MODULES *

Modules

)

Enumerates the modules loaded by the kernel.

Parameters

Modules

A variable which receives a pointer to a structure containing information about the kernel modules. The structure must be freed with the tag 'ThpK'.

Definition at line 317 of file main.c.

NTSTATUS KphpReadDriverParameters

(

__in PUNICODE_STRING

RegistryPath

)

Reads the driver parameters.

Parameters

RegistryPath

The registry path of the driver.

Definition at line 217 of file main.c.

ULONG KphpReadIntegerParameter	(	__in_opt HANDLE	KeyHandle,
		__in PUNICODE_STRING	ValueName,
		__in ULONG	DefaultValue
	)

Reads an integer (REG_DWORD) parameter from the registry.

Parameters

KeyHandle	A handle to the Parameters key. If NULL, the function fails immediately and returns DefaultValue.
ValueName	The name of the parameter.
DefaultValue	The value that is returned if the function fails to retrieve the parameter from the registry.

Returns

The parameter value, or DefaultValue if the function failed.

Definition at line 173 of file main.c.

NTSTATUS KphValidateAddressForSystemModules	(	__in PVOID	Address,
		__in SIZE_T	Length
	)

Checks if an address range lies within a kernel module.

Parameters

Address	The beginning of the address range.
Length	The number of bytes in the address range.

Definition at line 370 of file main.c.

NTSTATUS KpiGetFeatures	(	__out PULONG	Features,
		__in KPROCESSOR_MODE	AccessMode
	)

Definition at line 282 of file main.c.

Variable Documentation

DRIVER_INITIALIZE DriverEntry

Definition at line 25 of file main.c.

DRIVER_UNLOAD DriverUnload

Definition at line 26 of file main.c.