driver.cpp File Reference

#include "driver_constants.h"
#include "callbacks.h"
#include "pano_query.h"
#include "trace.h"
#include "pano_filter.h"

Go to the source code of this file.

Functions
void	UnloadPanoptes (PDRIVER_OBJECT DriverObject)
NTSTATUS	DriverEntry (PDRIVER_OBJECT DriverObject, PUNICODE_STRING RegistryPath)

Variables
UNICODE_STRING	g_deviceName
UNICODE_STRING	g_symLink
PDEVICE_OBJECT	g_deviceObject
UNICODE_STRING	g_SymbolicLinkName

Function Documentation

DriverEntry()

NTSTATUS DriverEntry	(	PDRIVER_OBJECT	DriverObject,
		PUNICODE_STRING	RegistryPath
	)

Definition at line 23 of file driver.cpp.

{
    PAGED_CODE();
    DriverObject->DriverUnload = UnloadPanoptes;
 
    TraceInit();
    Log_DriverEntry(DriverObject, RegistryPath);
 
    NTSTATUS status = FilterInit(&DriverObject);
    if (!NT_SUCCESS(status)) {
        DbgPrintEx(DPFLTR_IHVDRIVER_ID, DPFLTR_ERROR_LEVEL, "[!] Panoptes: An error occured when attempting to initialized filter\n");
        return status;
    }
 
    //status = InitializeDriverLink(driver_object);
    //if (!NT_SUCCESS(status))
    //{
    //  DbgPrintEx(DPFLTR_IHVDRIVER_ID, DPFLTR_ERROR_LEVEL, "[!] Panoptes: An error occured when attempting to initialized device pipe\n");
    //  return status;
    //}
 
    status = InitializeKernelCallbacks();
    if (!NT_SUCCESS(status))
    {
        DbgPrintEx(DPFLTR_IHVDRIVER_ID, DPFLTR_ERROR_LEVEL, "[!] Panoptes: An error occured when attempting to initialized kernel callbacks\n");
        return status;
    }
 
    return 0;
}

References FilterInit(), InitializeKernelCallbacks(), Log_DriverEntry(), TraceInit(), and UnloadPanoptes().

UnloadPanoptes()

void UnloadPanoptes

(

PDRIVER_OBJECT

DriverObject

)

Definition at line 12 of file driver.cpp.

{
    PAGED_CODE();
    DbgPrintEx(DPFLTR_IHVDRIVER_ID, DPFLTR_ERROR_LEVEL, "[+] Panoptes: Driver Exit\n");
    Log_DriverExit(DriverObject);
    //IoDeleteDevice(driver_object);
    //IoDeleteSymbolicLink(&g_symLink);
    TraceUninit();
    RemoveCallbacks();
}

References Log_DriverExit(), RemoveCallbacks(), and TraceUninit().

Referenced by DriverEntry().

Variable Documentation

g_deviceName

UNICODE_STRING g_deviceName

Definition at line 7 of file driver.cpp.

g_deviceObject

PDEVICE_OBJECT g_deviceObject

Definition at line 9 of file driver.cpp.

g_SymbolicLinkName

UNICODE_STRING g_SymbolicLinkName

Definition at line 10 of file driver.cpp.

g_symLink

UNICODE_STRING g_symLink

Definition at line 8 of file driver.cpp.