E:/PROJECTS/cvsed/mixed/VIRTUA~1/kdpatch/moduleapi.h File Reference

Implements inline equivalents of GetModuleHandle()/GetProcAddress() for kernel mode. More...

#include <bzsddk/undoc.h>

Include dependency graph for moduleapi.h:

This graph shows which files directly or indirectly include this file:

Go to the source code of this file.

Functions
static PVOID	KernelGetModuleBase (PCHAR pModuleName)
	Kernel-mode equivalent of GetModuleHandle().
static PVOID	KernelGetProcAddress (PVOID ModuleBase, PCHAR pFunctionName)
	Kernel-mode equivalent of GetProcAddress().

---

Detailed Description

Implements inline equivalents of GetModuleHandle()/GetProcAddress() for kernel mode.

Author:

Ivan Shcherbakov (Bazis)

Id

moduleapi.h,v 1.6 2008/12/31 13:55:11 Bazis Exp

The functions in this file were downloaded from http://alter.org.ua/docs/nt_kernel/procaddr/. Definitions partially from http://undocumented.ntinternals.net/.

Definition in file moduleapi.h.

---

Function Documentation

static PVOID KernelGetModuleBase

(

PCHAR

pModuleName

)

[inline, static]

Kernel-mode equivalent of GetModuleHandle().

This function returns the base address of a module loaded into kernel address space (can be a driver or a kernel-mode DLL).

Parameters:

pModuleName

Specifies the module name as an ANSI null-terminated string.

Returns:

The function returns the base address of a module, or NULL if it was not found among the loaded modules.

Remarks:

The function body was downloaded from here.

Definition at line 21 of file moduleapi.h.

static PVOID KernelGetProcAddress	(	PVOID	ModuleBase,
		PCHAR	pFunctionName
	)			[inline, static]

Kernel-mode equivalent of GetProcAddress().

This function returns the address of a function exported by a module loaded into kernel address space.

Parameters:

	ModuleBase	Specifies the module base address (can be determined by calling KernelGetModuleBase()).
	pFunctionName	Specifies the function name as an ANSI null-terminated string.

Returns:

The function returns the address of an exported function, or NULL if it was not found.

Remarks:

The function body was downloaded from here.

Definition at line 90 of file moduleapi.h.