KmdKit by Four-F

[misDelusion]

Hello, I was looking for the Kernel Mode Driver Development Tuts by Four-f on http://four-f.narod.ru/. However all links from the page to freewebs.com appear to be frozen. Could anyone help me with the tutorials?

Regards.

[jj2007]

Have you tested the "Download" link here?

[Gunther]

Hi misDelusion,

Have you tested the "Download" link here?

The link at the bottom of the page works fine. It's a rar archive. And welcome to the forum.

Gunther

[jj2007]

The link at the bottom of the page works fine. It's a rar archive.

Yes, it works fine. And yes, it's a rar archive.

[Mikl__]

Hi, misDelusion !

• Драйверы режима ядра: Часть 1: Основные понятия [Four-F]
• Драйверы режима ядра: Часть 2: Службы [Four-F]
• Драйверы режима ядра: Часть 3: Простейшие драйверы [Four-F]
• Драйверы режима ядра: Часть 4: Подсистема ввода-вывода [Four-F]
• Драйверы режима ядра: Часть 5: Полнофункциональный драйвер [Four-F]
• Драйверы режима ядра: Часть 6: Базовая техника: Работа с памятью. Использование системных куч [Four-F]
• Драйверы режима ядра: Часть 7: Работа с памятью. Использование ассоциативных списков [Four-F]
• Драйверы режима ядра: Часть 8: Базовая техника: Работа с памятью. Совместно используемый раздел [Four-F]
• Драйверы режима ядра: Часть 9: Базовая техника: Работа с памятью. Разделяемая память [Four-F]
• Драйверы режима ядра: Часть 10: Базовая техника: Реестр [Four-F]
• Драйверы режима ядра: Часть 11 : Базовая техника: Каталоги и файлы [Four-F]
• Драйверы режима ядра: Часть 12: Базовая техника. Синхронизация: Таймер и системный поток [Four-F]
• Драйверы режима ядра: Часть 13: Базовая техника. Синхронизация: Взаимоисключающий доступ [Four-F]
• Драйверы режима ядра: Часть 14: Базовая техника. Синхронизация: Использование объекта [Four-F]
• Драйверы режима ядра: Часть 15 : Жизненный цикл IRP [Four-F]
• Драйверы режима ядра: Часть 16 : Драйвер-фильтр (не PnP) [Four-F]

[HSE]

Hi Mikl__!

Copy a link and make Google search, and in "more" option select "Translator" . The translation from russian to english is very good, to spanish is not so good.

Regards. HSE

[Mikl__]

Hi, HSE!
fact is that Four-F is russian programmer from the site wasm.ru/forum. I have shown links to original article of Four-F in russian language from wasm.ru. I thought, if misDelusion had found references to Russian resource http://four-f.narod.ru/ means misDelusion knows Russian language. Many time ago I came across the articles of Four-F in English in pdf, but I can not find any reference to them

[jj2007]

Hi, HSE!
fact is that Four-F is russian programmer from the site wasm.ru/forum. I have shown links to original article of Four-F in russian language from wasm.ru. I thought, if misDelusion had found references to Russian resource http://four-f.narod.ru/ means misDelusion knows Russian language. Many time ago I came across the articles of Four-F in English in pdf, but I can not find any reference to them

Hi Mikl,

Your links in Russian were obviously exactly what misDelusion needs (btw he has not shown up again, so we are talking to ourselves here :P)

For those who want them in English, see reply #1. Below a snippet from the English chm file.

7.2 LookasideList driver source code
I was thinking really hard but I was failed to depict sensible and simple example for this article. That's why this driver will act probably senselessly. However this should not prevent you from understanding the concepts or associative and double linked lists.

There will be no driver control program, use KmdManager (included in KmdKit package) or something similar. Use DebugView ( http://www.sysinternals.com ) or SoftICE console to watch driver's debug messages.

;@echo off
;goto make

;:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
;                                                                                                   
;  LookasideList - Merely allocates and releases some fixed-size blocks of memory.                 
;                                                                                                   
;:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::

.486
.model flat, stdcall
option casemap:none

;:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
;                                 I N C L U D E   F I L E S                                         
;:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::

include \masm32\include\w2k\ntstatus.inc
include \masm32\include\w2k\ntddk.inc
include \masm32\include\w2k\ntoskrnl.inc
...