kdpatch/moduleapi.h File Reference

Implements inline equivalents of GetModuleHandle()/GetProcAddress() for kernel mode. More...

#include <bzsddk/undoc.h>

Include dependency graph for moduleapi.h:

This graph shows which files directly or indirectly include this file:


Functions

static PVOID KernelGetModuleBase (PCHAR pModuleName)
 Kernel-mode equivalent of GetModuleHandle().
static PVOID KernelGetProcAddress (PVOID ModuleBase, PCHAR pFunctionName)
 Kernel-mode equivalent of GetProcAddress().

Detailed Description

Implements inline equivalents of GetModuleHandle()/GetProcAddress() for kernel mode.

Author:
Ivan Shcherbakov (Bazis)
Id
moduleapi.h,v 1.6 2008/12/31 13:55:11 Bazis Exp
The functions in this file were downloaded from http://alter.org.ua/docs/nt_kernel/procaddr/. Definitions partially from http://undocumented.ntinternals.net/.

Function Documentation

static PVOID KernelGetModuleBase ( PCHAR  pModuleName  )  [inline, static]

Kernel-mode equivalent of GetModuleHandle().

This function returns the base address of a module loaded into kernel address space (can be a driver or a kernel-mode DLL).

Parameters:
pModuleName Specifies the module name as an ANSI null-terminated string.
Returns:
The function returns the base address of a module, or NULL if it was not found among the loaded modules.
Remarks:
The function body was downloaded from here.

static PVOID KernelGetProcAddress ( PVOID  ModuleBase,
PCHAR  pFunctionName 
) [inline, static]

Kernel-mode equivalent of GetProcAddress().

This function returns the address of a function exported by a module loaded into kernel address space.

Parameters:
ModuleBase Specifies the module base address (can be determined by calling KernelGetModuleBase()).
pFunctionName Specifies the function name as an ANSI null-terminated string.
Returns:
The function returns the address of an exported function, or NULL if it was not found.
Remarks:
The function body was downloaded from here.

SourceForge.net Logo