Ghidra, Reverse Engineering, Kernel Mode.
previously created device object to set up a symbolic link which will allow for user mode processes to communicate with the driver. Here’s how this looks in code: The last thing that DriverEntry does is defines the functions for IRP handlers. IRP Handlers I/O Request Packets (IRPs) are essentially