WDK Mini Filter Example
mspyLib.c File Reference
#include <initguid.h>
#include <stdio.h>
#include "mspyKern.h"
#include <ntifs.h>
#include <wsk.h>

Go to the source code of this file.


UCHAR TxNotificationToMinorCode (_In_ ULONG TxNotification)
PRECORD_LIST SpyAllocateBuffer (_Out_ PULONG RecordType)
VOID SpyFreeBuffer (_In_ PVOID Buffer)
VOID SpyFreeRecord (_In_ PRECORD_LIST Record)
VOID SpyBuildEcpDataString (_In_ PRECORD_LIST RecordList, _Inout_ PUNICODE_STRING EcpData, _In_reads_(NumKnownEcps) PVOID *ContextPointers)
VOID SpyParseEcps (_In_ PFLT_CALLBACK_DATA Data, _Inout_ PRECORD_LIST RecordList, _Inout_ PUNICODE_STRING EcpData)
VOID SpySetRecordNameAndEcpData (_Inout_ PLOG_RECORD LogRecord, _In_ PUNICODE_STRING Name, _In_opt_ PUNICODE_STRING EcpData)
VOID SpyLogPreOperationData (_In_ PFLT_CALLBACK_DATA Data, _In_ PCFLT_RELATED_OBJECTS FltObjects, _Inout_ PRECORD_LIST RecordList)
VOID SpyLogPostOperationData (_In_ PFLT_CALLBACK_DATA Data, _Inout_ PRECORD_LIST RecordList)
VOID SpyLogTransactionNotify (_In_ PCFLT_RELATED_OBJECTS FltObjects, _Inout_ PRECORD_LIST RecordList, _In_ ULONG TransactionNotification)
VOID SpyLog (_In_ PRECORD_LIST RecordList)
NTSTATUS SpyGetLog (_Out_writes_bytes_to_(OutputBufferLength, *ReturnOutputBufferLength) PUCHAR OutputBuffer, _In_ ULONG OutputBufferLength, _Out_ PULONG ReturnOutputBufferLength)
VOID SpyEmptyOutputBufferList (VOID)
VOID SpyReadDriverParameters (_In_ PUNICODE_STRING RegistryPath)

Function Documentation

◆ SpyAllocateBuffer()

PRECORD_LIST SpyAllocateBuffer ( _Out_ PULONG  RecordType)

Definition at line 110 of file mspyLib.c.

◆ SpyBuildEcpDataString()

VOID SpyBuildEcpDataString ( _In_ PRECORD_LIST  RecordList,
_In_reads_(NumKnownEcps) PVOID *  ContextPointers 

Definition at line 325 of file mspyLib.c.

◆ SpyEmptyOutputBufferList()

VOID SpyEmptyOutputBufferList ( VOID  )

Definition at line 1396 of file mspyLib.c.

◆ SpyFreeBuffer()

VOID SpyFreeBuffer ( _In_ PVOID  Buffer)

Definition at line 182 of file mspyLib.c.

◆ SpyFreeRecord()

VOID SpyFreeRecord ( _In_ PRECORD_LIST  Record)

Definition at line 285 of file mspyLib.c.

◆ SpyGetLog()

NTSTATUS SpyGetLog ( _Out_writes_bytes_to_(OutputBufferLength, *ReturnOutputBufferLength) PUCHAR  OutputBuffer,
_In_ ULONG  OutputBufferLength,
_Out_ PULONG  ReturnOutputBufferLength 

Definition at line 1240 of file mspyLib.c.

◆ SpyLog()

VOID SpyLog ( _In_ PRECORD_LIST  RecordList)

Definition at line 1206 of file mspyLib.c.

◆ SpyLogPostOperationData()

VOID SpyLogPostOperationData ( _In_ PFLT_CALLBACK_DATA  Data,
_Inout_ PRECORD_LIST  RecordList 

Definition at line 1117 of file mspyLib.c.

◆ SpyLogPreOperationData()

VOID SpyLogPreOperationData ( _In_ PFLT_CALLBACK_DATA  Data,
_Inout_ PRECORD_LIST  RecordList 

Definition at line 1047 of file mspyLib.c.

◆ SpyLogTransactionNotify()

VOID SpyLogTransactionNotify ( _In_ PCFLT_RELATED_OBJECTS  FltObjects,
_Inout_ PRECORD_LIST  RecordList,
_In_ ULONG  TransactionNotification 

Definition at line 1152 of file mspyLib.c.

◆ SpyNewRecord()


Definition at line 218 of file mspyLib.c.

◆ SpyParseEcps()

VOID SpyParseEcps ( _In_ PFLT_CALLBACK_DATA  Data,
_Inout_ PRECORD_LIST  RecordList,

Definition at line 707 of file mspyLib.c.

◆ SpyReadDriverParameters()

VOID SpyReadDriverParameters ( _In_ PUNICODE_STRING  RegistryPath)

Definition at line 1445 of file mspyLib.c.

◆ SpySetRecordNameAndEcpData()

VOID SpySetRecordNameAndEcpData ( _Inout_ PLOG_RECORD  LogRecord,
_In_opt_ PUNICODE_STRING  EcpData 

Definition at line 885 of file mspyLib.c.

◆ TxNotificationToMinorCode()

UCHAR TxNotificationToMinorCode ( _In_ ULONG  TxNotification)

Definition at line 44 of file mspyLib.c.

Social Network

Services Overview

Architect, implement and test file system filter drivers for a wide range of functionality. We can offer several levels of assistance to meet your specific.

Contact Us

You are welcome to contact us for salse or partnership.

Sales: sales@easefilter.com
Support: support@easefilter.com
Info: info@easefilter.com