IO控制内核通信.docxVIP

基于visual c++之windows核心编程代码分析（24）IO控制、内核通信分类：VC++编程技术Visual C++2010编程技术信息安全Visual Studio2012Windows82011-12-17 13:06136人阅读评论(0)收藏举报我们在进行Windows编程的时候，经常需要进行IO控制与内核通信，我们来实现IO控制与内核通信。请见代码实现与注释讲解?驱动代码实现与分析view plaincopy to clipboardprint?/*?头文件?*/??#include?ntddk.h//?包括了很多NT内核的类型、结构、函数定义，开发驱动时需要包括此头文件??#include?string.h ??#include?xioctl.h ??/*?常量与预定义?*/??#define?NT_DEVICE_NAME??????L\\Device\\XIOCTL ??#define?DOS_DEVICE_NAME?????L\\DosDevices\\IoctlTest ????#if?DBG ??#define?XIOCTL_KDPRINT(_x_)?\ ??????????????????DbgPrint(XIOCTL.SYS:?);\??????????????????DbgPrint?_x_;??#else ??#define?XIOCTL_KDPRINT(_x_) ??#endif? ????/*?函数声明?*/??NTSTATUS?DriverEntry(PDRIVER_OBJECT??DriverObject,?PUNICODE_STRING?RegistryPath);??NTSTATUS?XioctlCreateClose(PDEVICE_OBJECT?DeviceObject,?PIRP?Irp);??NTSTATUS?XioctlDeviceControl(PDEVICE_OBJECT?DeviceObject,?PIRP?Irp?);??VOID?XioctlUnloadDriver(PDRIVER_OBJECT?DriverObject?);??VOID?PrintIrpInfo(?PIRP?Irp?);??VOID?PrintChars(?PCHAR?BufferAddress,?ULONG?CountChars?);????#ifdef?ALLOC_PRAGMA ??#pragma?alloc_text(?INIT,?DriverEntry?) ??#pragma?alloc_text(?PAGE,?XioctlCreateClose) ??#pragma?alloc_text(?PAGE,?XioctlDeviceControl) ??#pragma?alloc_text(?PAGE,?XioctlUnloadDriver) ??#pragma?alloc_text(?PAGE,?PrintIrpInfo) ??#pragma?alloc_text(?PAGE,?PrintChars) ??#endif?//?ALLOC_PRAGMA ??????/*************************************?*?DriverEntry?*?功能????驱动的入口函数，分配了相关处理例程?**************************************/??NTSTATUS??DriverEntry(??????IN?OUT?PDRIVER_OBJECT???DriverObject,??????IN?PUNICODE_STRING??????RegistryPath??????)??{??????NTSTATUS????????ntStatus;??????UNICODE_STRING??ntUnicodeString;????//?设备名??????UNICODE_STRING??ntWin32NameString;????//?Win32?设备名??????PDEVICE_OBJECT??deviceObject?=?NULL;????//?设备对象??????????RtlInitUnicodeString(?ntUnicodeString,?NT_DEVICE_NAME?);??????//?创建设备??????ntStatus?=?IoCreateDevice(??????????DriverObject,???????????????????//?驱动对象?DriverEntry?的参数??????????0,??????????????????????????????//?不使用设备扩展??????????ntUnicodeStr