mspyLib.c File Reference

#include <initguid.h>
#include <stdio.h>
#include "mspyKern.h"
#include <ntifs.h>
#include <wsk.h>

Go to the source code of this file.

Functions
UCHAR	TxNotificationToMinorCode (_In_ ULONG TxNotification)
PRECORD_LIST	SpyAllocateBuffer (_Out_ PULONG RecordType)
VOID	SpyFreeBuffer (_In_ PVOID Buffer)
PRECORD_LIST	SpyNewRecord (VOID)
VOID	SpyFreeRecord (_In_ PRECORD_LIST Record)
VOID	SpyBuildEcpDataString (_In_ PRECORD_LIST RecordList, _Inout_ PUNICODE_STRING EcpData, _In_reads_(NumKnownEcps) PVOID *ContextPointers)
VOID	SpyParseEcps (_In_ PFLT_CALLBACK_DATA Data, _Inout_ PRECORD_LIST RecordList, _Inout_ PUNICODE_STRING EcpData)
VOID	SpySetRecordNameAndEcpData (_Inout_ PLOG_RECORD LogRecord, _In_ PUNICODE_STRING Name, _In_opt_ PUNICODE_STRING EcpData)
VOID	SpyLogPreOperationData (_In_ PFLT_CALLBACK_DATA Data, _In_ PCFLT_RELATED_OBJECTS FltObjects, _Inout_ PRECORD_LIST RecordList)
VOID	SpyLogPostOperationData (_In_ PFLT_CALLBACK_DATA Data, _Inout_ PRECORD_LIST RecordList)
VOID	SpyLogTransactionNotify (_In_ PCFLT_RELATED_OBJECTS FltObjects, _Inout_ PRECORD_LIST RecordList, _In_ ULONG TransactionNotification)
VOID	SpyLog (_In_ PRECORD_LIST RecordList)
NTSTATUS	SpyGetLog (_Out_writes_bytes_to_(OutputBufferLength, *ReturnOutputBufferLength) PUCHAR OutputBuffer, _In_ ULONG OutputBufferLength, _Out_ PULONG ReturnOutputBufferLength)
VOID	SpyEmptyOutputBufferList (VOID)
VOID	SpyReadDriverParameters (_In_ PUNICODE_STRING RegistryPath)

Function Documentation

SpyAllocateBuffer()

PRECORD_LIST SpyAllocateBuffer

(

_Out_ PULONG

RecordType

)

Definition at line 110 of file mspyLib.c.

SpyBuildEcpDataString()

VOID SpyBuildEcpDataString	(	_In_ PRECORD_LIST	RecordList,
		_Inout_ PUNICODE_STRING	EcpData,
		_In_reads_(NumKnownEcps) PVOID *	ContextPointers
	)

Definition at line 325 of file mspyLib.c.

SpyEmptyOutputBufferList()

VOID SpyEmptyOutputBufferList

(

VOID

)

Definition at line 1396 of file mspyLib.c.

SpyFreeBuffer()

VOID SpyFreeBuffer

(

_In_ PVOID

Buffer

)

Definition at line 182 of file mspyLib.c.

SpyFreeRecord()

VOID SpyFreeRecord

(

_In_ PRECORD_LIST

Record

)

Definition at line 285 of file mspyLib.c.

SpyGetLog()

NTSTATUS SpyGetLog	(	_Out_writes_bytes_to_(OutputBufferLength, *ReturnOutputBufferLength) PUCHAR	OutputBuffer,
		_In_ ULONG	OutputBufferLength,
		_Out_ PULONG	ReturnOutputBufferLength
	)

Definition at line 1240 of file mspyLib.c.

SpyLog()

VOID SpyLog

(

_In_ PRECORD_LIST

RecordList

)

Definition at line 1206 of file mspyLib.c.

SpyLogPostOperationData()

VOID SpyLogPostOperationData	(	_In_ PFLT_CALLBACK_DATA	Data,
		_Inout_ PRECORD_LIST	RecordList
	)

Definition at line 1117 of file mspyLib.c.

SpyLogPreOperationData()

VOID SpyLogPreOperationData	(	_In_ PFLT_CALLBACK_DATA	Data,
		_In_ PCFLT_RELATED_OBJECTS	FltObjects,
		_Inout_ PRECORD_LIST	RecordList
	)

Definition at line 1047 of file mspyLib.c.

SpyLogTransactionNotify()

VOID SpyLogTransactionNotify	(	_In_ PCFLT_RELATED_OBJECTS	FltObjects,
		_Inout_ PRECORD_LIST	RecordList,
		_In_ ULONG	TransactionNotification
	)

Definition at line 1152 of file mspyLib.c.

SpyNewRecord()

PRECORD_LIST SpyNewRecord

(

VOID

)

Definition at line 218 of file mspyLib.c.

SpyParseEcps()

VOID SpyParseEcps	(	_In_ PFLT_CALLBACK_DATA	Data,
		_Inout_ PRECORD_LIST	RecordList,
		_Inout_ PUNICODE_STRING	EcpData
	)

Definition at line 707 of file mspyLib.c.

SpyReadDriverParameters()

VOID SpyReadDriverParameters

(

_In_ PUNICODE_STRING

RegistryPath

)

Definition at line 1445 of file mspyLib.c.

SpySetRecordNameAndEcpData()

VOID SpySetRecordNameAndEcpData	(	_Inout_ PLOG_RECORD	LogRecord,
		_In_ PUNICODE_STRING	Name,
		_In_opt_ PUNICODE_STRING	EcpData
	)

Definition at line 885 of file mspyLib.c.

TxNotificationToMinorCode()

UCHAR TxNotificationToMinorCode

(

_In_ ULONG

TxNotification

)

Definition at line 44 of file mspyLib.c.