EXE部分
[cpp]?view plaincopy
#include?<stdio.h>?? #include?<Windows.h>?? ?? int?main?(void)?? {?? ????char?linkname[]="\\\\.\\HelloDDK";?? ????HANDLE?hDevice?=?CreateFileA(linkname,GENERIC_READ?|?GENERIC_WRITE,0,NULL,OPEN_EXISTING,FILE_ATTRIBUTE_NORMAL,NULL);?? ????if?(hDevice?==?INVALID_HANDLE_VALUE)?? ????{?? ????????printf("Win32?error?code:?%d\n",GetLastError());?? ????????return?1;?? ????}?? ?? ????UCHAR?buffer[10]={0};?? ????ULONG?ulRead=0;?? ????if?(ReadFile(hDevice,buffer,10,&ulRead,NULL))?? ????{?? ????????printf("Read?%d?bytes:",ulRead);?? ????????for?(int?i=0;i<(int)ulRead;i++)?? ????????{?? ????????????printf("%02X?",buffer[i]);?? ????????}?? ????????printf("\n");?? ????}?? ????getchar();?? ????getchar();?? ?? ????ulRead=0;?? ????if?(WriteFile(hDevice,buffer,10,&ulRead,NULL))?? ????{?? ????????printf("write?%d?bytes\n",ulRead);?? ????????for?(int?i=0;i<(int)ulRead;i++)?? ????????{?? ????????????printf("%02X?",buffer[i]);?? ????????}?? ????????printf("\n");?? ????}?? ?? ????CloseHandle(hDevice);?? ?? ????getchar();?? ????getchar();?? ????return?0;?? }??
?
SYS部分
[cpp]?view plaincopy
#pragma?once?? ?? #include?<ntddk.h>?? #define?CountArray(Array)??(????sizeof(Array)???/???sizeof(Array[0])????)?? ?? typedef?struct?_DEVICE_EXTENSION?? {?? ????PDEVICE_OBJECT?pDevice;??????????????????????????????????????? ????UNICODE_STRING?ustrDeviceName;???????????????????? ????UNICODE_STRING?ustrSymLinkName;??????????????????? }DEVICE_EXTENSION,*PDEVICE_EXTENSION;?? ?? ?? ?? #ifdef?__cplusplus?? extern?"C"?NTSTATUS?DriverEntry(IN?PDRIVER_OBJECT?DriverObject,?IN?PUNICODE_STRING??RegistryPath);?? #endif?? ?? void?HelloUnload(IN?PDRIVER_OBJECT?DriverObject);????????????????????????????????????????????????????????? NTSTATUS?CreateDevice(PDRIVER_OBJECT?PDevObj);???????????????????????????????????????????????????? NTSTATUS?HelloDDKDispatchRoutine(IN?PDEVICE_OBJECT?pDevObj,IN?PIRP?pIrp);????? NTSTATUS?HelloDDKRead(IN?PDEVICE_OBJECT?pDevObj,IN?PIRP?pIrP);???????????????????????? NTSTATUS?HelloDDKWrite(IN?PDEVICE_OBJECT?pDevObj,IN?PIRP?pIrP);???????????????????????
?
?
[cpp]?view plaincopy
#include?"hello.h"?? ?? NTSTATUS?DriverEntry(IN?PDRIVER_OBJECT?DriverObject,?IN?PUNICODE_STRING??RegistryPath)?? {?? ????????DbgPrint("Hello?from!\n");?? ????????DriverObject->DriverUnload?=?HelloUnload;?? ????????for?(int?i=0;i<IRP_MJ_MAXIMUM_FUNCTION;i++)?? ????????{?? ????????????DriverObject->MajorFunction[i]=HelloDDKDispatchRoutine;?? ????????}?? ????????DriverObject->MajorFunction[IRP_MJ_READ]=HelloDDKRead;????????????? ????????DriverObject->MajorFunction[IRP_MJ_WRITE]=HelloDDKWrite;??????? ?? ?? #if?DBG?? ????????_asm?int?3?? #endif?? ?????????? ????????CreateDevice(DriverObject);?? ?? ????????return?STATUS_SUCCESS;?? }?? ?? ?? NTSTATUS?HelloDDKRead(IN?PDEVICE_OBJECT?pDevObj,IN?PIRP?pIrP)?? {?? #if?DBG?? ????_asm?int?3?? #endif?? ?? ????NTSTATUS?status=STATUS_SUCCESS;?? ?? ????PIO_STACK_LOCATION?stack=IoGetCurrentIrpStackLocation(pIrP);?? ????ULONG?ulReadLength=stack->Parameters.Read.Length;?? ?? ????ULONG?mdl_length=MmGetMdlByteCount(pIrP->MdlAddress);?????????????????????? ????PVOID??mdl_address=MmGetMdlVirtualAddress(pIrP->MdlAddress);??????? ????ULONG?mdl_offset=MmGetMdlByteOffset(pIrP->MdlAddress);????????????????????? ?? ????if?(mdl_length!=ulReadLength)?? ????{?? ?????????? ????????pIrP->IoStatus.Information=0;?? ????????status=STATUS_UNSUCCESSFUL;?? ????}?? ????else?? ????{?? ?????????? ????????PVOID?kernel_address=MmGetSystemAddressForMdlSafe(pIrP->MdlAddress,NormalPagePriority);?? ????????DbgPrint("address0X%08X\n",kernel_address);?? ????????memset(kernel_address,0XAA,ulReadLength);?? ????????pIrP->IoStatus.Information=ulReadLength;?? ????}?? ?? ?????? ????pIrP->IoStatus.Status=status;?????????????????????????????????????????????????????????????????????? ????IoCompleteRequest(pIrP,IO_NO_INCREMENT);?????????????????????????????????????????? ?? ????return?status;?? }?? ?? ?? NTSTATUS?HelloDDKWrite(IN?PDEVICE_OBJECT?pDevObj,IN?PIRP?pIrP)?? {?? #if?DBG?? ????_asm?int?3?? #endif?? ?? ????NTSTATUS?status=STATUS_SUCCESS;?? ?? ????PIO_STACK_LOCATION?stack=IoGetCurrentIrpStackLocation(pIrP);?? ????ULONG?ulWriteLength=stack->Parameters.Write.Length;?? ?? ????ULONG?mdl_length=MmGetMdlByteCount(pIrP->MdlAddress);?????????????????????? ????PVOID??mdl_address=MmGetMdlVirtualAddress(pIrP->MdlAddress);??????? ????ULONG?mdl_offset=MmGetMdlByteOffset(pIrP->MdlAddress);????????????????????? ?? ????if?(mdl_length!=ulWriteLength)?? ????{?? ?????????? ????????pIrP->IoStatus.Information=0;?? ????????status=STATUS_UNSUCCESSFUL;?? ????}?? ????else?? ????{?? ?????????? ????????PVOID?kernel_address=MmGetSystemAddressForMdlSafe(pIrP->MdlAddress,NormalPagePriority);?? ????????DbgPrint("address0X%08X\n",kernel_address);?? ????????UCHAR?buffer[10]={0};?? ????????memcpy(buffer,kernel_address,ulWriteLength);?? ????????for?(int?i=0;i<(int)ulWriteLength;i++)?? ????????{?? ????????????DbgPrint("%02x\n",buffer[i]);?? ????????}?? ????????memset(kernel_address,0XAA,ulWriteLength);?? ????????pIrP->IoStatus.Information=ulWriteLength;?? ????}?? ?? ?? ?????? ????pIrP->IoStatus.Status=status;?????????????????????????????????????????????????????????????????????? ????IoCompleteRequest(pIrP,IO_NO_INCREMENT);?????????????????????????????????????????? ?? ????return?status;?? }?? ?? ?? void?HelloUnload(IN?PDRIVER_OBJECT?DriverObject)?? {?? ????????DbgPrint("Goodbye?from!\n");?? ????????PDEVICE_OBJECT?pNextObj=NULL;?? ????????pNextObj=DriverObject->DeviceObject;?? ?? ????????while?(pNextObj)?? ????????{?? ????????????PDEVICE_EXTENSION?pDevExt=(PDEVICE_EXTENSION)pNextObj->DeviceExtension;?? ?????????????? ????????????IoDeleteSymbolicLink(&pDevExt->ustrSymLinkName);?? ?????????????? ????????????IoDeleteDevice(pDevExt->pDevice);?? ?? ????????????pNextObj=pNextObj->NextDevice;?? ????????}?? }?? ?? ?? NTSTATUS?CreateDevice(PDRIVER_OBJECT?pDriver_Object)?? {?? ?????? ????NTSTATUS?status=STATUS_SUCCESS;?? ????PDEVICE_OBJECT?pDevObje=NULL;?? ????PDEVICE_EXTENSION?pDevExt=NULL;?? ?? ?????? ????UNICODE_STRING?devname;?? ????UNICODE_STRING?symLinkName;?? ????RtlInitUnicodeString(&devname,L"\\device\\hello");?? ????RtlInitUnicodeString(&symLinkName,L"\\??\\HelloDDK");?? ?? ?????? ????if?(IoCreateDevice(pDriver_Object,sizeof(PDEVICE_EXTENSION),&devname,FILE_DEVICE_UNKNOWN,NULL,TRUE,&pDevObje)!=STATUS_SUCCESS?)?? ????{?? ????????DbgPrint("創建設備失敗\n");?? ????????return?status;?? ????}?? ?? ?????? ????pDevObje->Flags?|=?DO_DIRECT_IO;??????????????? ????pDevExt=(PDEVICE_EXTENSION)pDevObje->DeviceExtension;?? ????pDevExt->pDevice=pDevObje;?? ????pDevExt->ustrDeviceName=devname;?? ????pDevExt->ustrSymLinkName=symLinkName;?? ?? ?????? ????if?(IoCreateSymbolicLink(&symLinkName,&devname)!=STATUS_SUCCESS?)?? ????{?? ????????DbgPrint("創建符號連接失敗\n");?? ????????IoDeleteDevice(pDevObje);?? ????????return?status;?? ????}?? ????return?STATUS_SUCCESS;?? }?? ?? ?? NTSTATUS?HelloDDKDispatchRoutine(IN?PDEVICE_OBJECT?pDevObj,IN?PIRP?pIrP)?? {?? #if?DBG?? ????_asm?int?3?? #endif?? ?? ????PIO_STACK_LOCATION?stack?=?IoGetCurrentIrpStackLocation(pIrP);?? ?????? ????static?char*?irpname[]?=??? ????{?? ????????"IRP_MJ_CREATE",?? ????????"IRP_MJ_CREATE_NAMED_PIPE",?? ????????"IRP_MJ_CLOSE",?? ????????"IRP_MJ_READ",?? ????????"IRP_MJ_WRITE",?? ????????"IRP_MJ_QUERY_INFORMATION",?? ????????"IRP_MJ_SET_INFORMATION",?? ????????"IRP_MJ_QUERY_EA",?? ????????"IRP_MJ_SET_EA",?? ????????"IRP_MJ_FLUSH_BUFFERS",?? ????????"IRP_MJ_QUERY_VOLUME_INFORMATION",?? ????????"IRP_MJ_SET_VOLUME_INFORMATION",?? ????????"IRP_MJ_DIRECTORY_CONTROL",?? ????????"IRP_MJ_FILE_SYSTEM_CONTROL",?? ????????"IRP_MJ_DEVICE_CONTROL",?? ????????"IRP_MJ_INTERNAL_DEVICE_CONTROL",?? ????????"IRP_MJ_SHUTDOWN",?? ????????"IRP_MJ_LOCK_CONTROL",?? ????????"IRP_MJ_CLEANUP",?? ????????"IRP_MJ_CREATE_MAILSLOT",?? ????????"IRP_MJ_QUERY_SECURITY",?? ????????"IRP_MJ_SET_SECURITY",?? ????????"IRP_MJ_POWER",?? ????????"IRP_MJ_SYSTEM_CONTROL",?? ????????"IRP_MJ_DEVICE_CHANGE",?? ????????"IRP_MJ_QUERY_QUOTA",?? ????????"IRP_MJ_SET_QUOTA",?? ????????"IRP_MJ_PNP",?? ????};?? ?? ????UCHAR?type?=?stack->MajorFunction;?? ?? ????if?(type?>=?CountArray(irpname))?? ????????KdPrint(("無效的IRP類型?%X\n",?type));?? ????else?? ????????KdPrint(("%s\n",?irpname[type]));?? ?? ?? ?? ?? ????pIrP->IoStatus.Status=STATUS_SUCCESS;?????????????????????? ????pIrP->IoStatus.Information=0;?????????????????????????????????????????? ????IoCompleteRequest(pIrP,IO_NO_INCREMENT);?????????????? ????return?STATUS_SUCCESS;?? }??
總結
以上是生活随笔為你收集整理的EXE和SYS通信(ReadFile WriteFile DO_DIRECT_IO) 直接方式的全部內容，希望文章能夠幫你解決所遇到的問題。
如果覺得生活随笔網站內容還不錯，歡迎將生活随笔推薦給好友。
