64位版的VB2010使用SCM加载驱动

tangptr@126.com

和以前大家在VB6上使用的cls_Driver.cls类模块一样，我们也是把它放进一个类模块里用。不过注意VB6下有些地方使用到了指针，我们不能直接拿来用而是要用间接传递或者用VirtualAlloc，代码如下：

1. Public Class cls_Driver
   
2.     Private Declare Function OpenSCManager Lib "advapi32.dll" Alias "OpenSCManagerA" (ByVal lpMachineName As String, ByVal lpDatabaseName As String, ByVal dwDesiredAccess As Long) As Long
   
3.     Private Declare Function OpenService Lib "advapi32.dll" Alias "OpenServiceA" (ByVal hSCManager As Long, ByVal lpServiceName As String, ByVal dwDesiredAccess As Long) As Long
   
4.     Private Declare Function StartService Lib "advapi32.dll" Alias "StartServiceA" (ByVal hService As Long, ByVal dwNumServiceArgs As Long, ByVal lpServiceArgVectors As Long) As Long
   
5.     Private Declare Function CreateService Lib "advapi32.dll" Alias "CreateServiceA" (ByVal hSCManager As Long, ByVal lpServiceName As String, ByVal lpDisplayName As String, ByVal dwDesiredAccess As Long, ByVal dwServiceType As Long, ByVal dwStartType As Long, ByVal dwErrorControl As Long, ByVal lpBinaryPathName As String, ByVal lpLoadOrderGroup As Long, ByVal lpdwTagId As Long, ByVal lpDependencies As Long, ByVal lp As Long, ByVal lpPassword As Long) As Long
   
6.     Private Declare Function ControlService Lib "advapi32.dll" (ByVal hService As Long, ByVal dwControl As Long, ByRef lpServiceStatus As SERVICE_STATUS) As Long
   
7.     Private Declare Function DeviceIoControl Lib "kernel32" (ByVal hDevice As Long, ByVal dwIoControlCode As Long, ByVal lpInBuffer As Long, ByVal nInBufferSize As Long, ByVal lpOutBuffer As Long, ByVal nOutBufferSize As Long, ByVal lpBytesReturned As Long, ByVal lpOverlapped As Long) As Long
   
8.     Private Declare Function DeleteService Lib "advapi32.dll" (ByVal hService As Long) As Long
   
9.     Private Declare Function CloseServiceHandle Lib "advapi32.dll" (ByVal hSCObject As Long) As Long
   
10.     Private Declare Function QueryServiceStatus Lib "advapi32.dll" (ByVal hService As Long, ByRef lpServiceStatus As SERVICE_STATUS) As Long
    
11.     Private Declare Function CreateFile Lib "kernel32.dll" Alias "CreateFileA" (ByVal lpFileName As String, ByVal dwDesiredAccess As Long, ByVal dwShareMode As Long, ByVal lpSecurityAttributes As Long, ByVal dwCreationDisposition As Long, ByVal dwFlagsAndAttributes As Long, ByVal hTemplateFile As Long) As Long
    
12.     Private Declare Function CloseHandle Lib "kernel32.dll" (ByVal hObject As Long) As Long
    
13.     Private Declare Function GetLastError Lib "kernel32.dll" () As Long
    
14.     Private Declare Function VirtualAlloc Lib "kernel32.dll" Alias "VirtualAlloc" (ByVal lpAddress As Long, ByVal dwSize As Integer, ByVal flAllocationType As Integer, ByVal flProtect As Integer) As Long
    
15.     Private Declare Function VirtualFree Lib "kernel32.dll" Alias "VirtualFree" (ByVal lpAddress As Long, ByVal dwSize As Integer, ByVal dwFreeType As Integer) As Long
    
16.     Private Declare Sub Sleep Lib "kernel32.dll" (ByVal dwMilliseconds As Long)
    
17. 
    
18.     Private Const SC_MANAGER_CONNECT = &H1
    
19.     Private Const SC_MANAGER_CREATE_SERVICE = &H2
    
20.     Private Const SC_MANAGER_ENUMERATE_SERVICE = &H4
    
21.     Private Const SC_MANAGER_LOCK = &H8
    
22.     Private Const SC_MANAGER_QUERY_LOCK_STATUS = &H10
    
23.     Private Const SC_MANAGER_MODIFY_BOOT_CONFIG = &H20
    
24.     Private Const STANDARD_RIGHTS_REQUIRED = &HF0000
    
25.     Private Const SC_MANAGER_ALL_ACCESS = (STANDARD_RIGHTS_REQUIRED Or SC_MANAGER_CONNECT Or SC_MANAGER_CREATE_SERVICE Or SC_MANAGER_ENUMERATE_SERVICE Or SC_MANAGER_LOCK Or SC_MANAGER_QUERY_LOCK_STATUS Or SC_MANAGER_MODIFY_BOOT_CONFIG)
    
26. 
    
27.     Private Const SERVICE_QUERY_CONFIG = &H1
    
28.     Private Const SERVICE_CHANGE_CONFIG = &H2
    
29.     Private Const SERVICE_QUERY_STATUS = &H4
    
30.     Private Const SERVICE_ENUMERATE_DEPENDENTS = &H8
    
31.     Private Const SERVICE_START = &H10
    
32.     Private Const SERVICE_STOP = &H20
    
33.     Private Const SERVICE_PAUSE_CONTINUE = &H40
    
34.     Private Const SERVICE_INTERROGATE = &H80
    
35.     Private Const SERVICE_USER_DEFINED_CONTROL = &H100
    
36.     Private Const SERVICE_ALL_ACCESS = (STANDARD_RIGHTS_REQUIRED Or SERVICE_QUERY_CONFIG Or SERVICE_CHANGE_CONFIG Or SERVICE_QUERY_STATUS Or SERVICE_ENUMERATE_DEPENDENTS Or SERVICE_START Or SERVICE_STOP Or SERVICE_PAUSE_CONTINUE Or SERVICE_INTERROGATE Or SERVICE_USER_DEFINED_CONTROL)
    
37. 
    
38.     Private Const SERVICE_KERNEL_DRIVER As Long = &H1
    
39. 
    
40.     Private Const SERVICE_DEMAND_START As Long = &H3
    
41. 
    
42.     Private Const SERVICE_ERROR_NORMAL As Long = &H1
    
43. 
    
44.     Private Const SERVICE_CONTROL_STOP = &H1
    
45. 
    
46.     Private Structure SERVICE_STATUS
    
47.         Dim dwServiceType As Long
    
48.         Dim dwCurrentState As Long
    
49.         Dim dwControlsAccepted As Long
    
50.         Dim dwWin32ExitCode As Long
    
51.         Dim dwServiceSpecificExitCode As Long
    
52.         Dim dwCheckPoint As Long
    
53.         Dim dwWaitHint As Long
    
54.     End Structure
    
55.     Private Const SERVICE_START_PENDING As Long = &H2
    
56.     Private Const SERVICE_RUNNING As Long = &H4
    
57.     Private Const SERVICE_RUNS_IN_SYSTEM_PROCESS As Long = &H1
    
58.     Private Const SERVICE_STOP_PENDING As Long = &H3
    
59.     Private Const SERVICE_STOPPED As Long = &H1
    
60. 
    
61.     Private Const GENERIC_READ As Long = &H80000000
    
62.     Private Const GENERIC_WRITE As Long = &H40000000
    
63.     Private Const OPEN_EXISTING As Long = 3
    
64.     Private Const FILE_ATTRIBUTE_NORMAL As Long = &H80
    
65.     Private Const FILE_FLAG_OVERLAPPED As Long = &H40000000
    
66.     Private Const FILE_FLAG_DELETE_ON_CLOSE As Long = &H4000000
    
67.     Private Const FILE_SHARE_READ As Long = &H1
    
68.     Private Const FILE_SHARE_WRITE As Long = &H2
    
69. 
    
70.     Private Const INVALID_HANDLE_VALUE As Long = (-1)
    
71. 
    
72.     Private Const FILE_DEVICE_UNKNOWN As Long = &H22
    
73.     Private Const METHOD_BUFFERED As Long = 0
    
74.     Private Const FILE_ANY_ACCESS As Long = 0
    
75. 
    
76.     Private Const ERROR_SERVICE_EXISTS As Long = 1073&
    
77.     Private Const ERROR_IO_PENDING As Long = 997
    
78.     Private Const ERROR_SERVICE_MARKED_FOR_DELETE As Long = 1072&
    
79. 
    
80.     Public szDrvSvcName As String
    
81.     Public szDrvDisplayName As String
    
82.     Public szDrvFilePath As String
    
83.     Public szDrvLinkName As String 'e.g. "\\.\TestDrv"
    
84. 
    
85.     Dim hSvcHandle As Long
    
86.     Dim scHandle As Long
    
87.     Dim hDrvHandle As Long
    
88. 
    
89.     Public Function InstDrv() As Boolean
    
90.         Static nTry As Long
    
91.         scHandle = OpenSCManager(vbNullString, vbNullString, SC_MANAGER_ALL_ACCESS)
    
92.         If (Not CBool(scHandle)) Then
    
93.             DelDrv()
    
94.             Return False
    
95.             Exit Function
    
96.         End If
    
97.         hSvcHandle = CreateService(scHandle, szDrvSvcName, szDrvDisplayName, SERVICE_ALL_ACCESS, SERVICE_KERNEL_DRIVER, SERVICE_DEMAND_START, SERVICE_ERROR_NORMAL, szDrvFilePath, 0, 0, 0, 0, 0)
    
98.         If (Not CBool(hSvcHandle)) Then
    
99.             'If ((GetLastError = ERROR_SERVICE_EXISTS) Or (GetLastError = ERROR_SERVICE_MARKED_FOR_DELETE)) Then
    
100.             If (nTry > 5) Then InstDrv = False : nTry = 0 : Exit Function
     
101.             hSvcHandle = OpenService(scHandle, szDrvSvcName, SERVICE_ALL_ACCESS)
     
102.             DelDrv()
     
103.             nTry = nTry + 1
     
104.             InstDrv()
     
105.             'Else
     
106.             'DelDrv
     
107.             'Exit Function
     
108.             'End If
     
109.         End If
     
110.         InstDrv = True
     
111.     End Function
     
112. 
     
113.     Public Function StartDrv() As Boolean
     
114.         Dim ret&
     
115.         Dim ss As SERVICE_STATUS
     
116.         Call QueryServiceStatus(hSvcHandle, ss)
     
117.         'If (ss.dwCurrentState = SERVICE_RUNS_IN_SYSTEM_PROCESS) Then StartDrv = True: Exit Function
     
118.         ret = StartService(hSvcHandle, 0, 0)
     
119.         If (CBool(ret)) Then
     
120.             Dim nTry As Long : nTry = 0
     
121.             Call QueryServiceStatus(hSvcHandle, ss)
     
122.             While ((ss.dwCurrentState = SERVICE_START_PENDING) And (nTry < 80))
     
123.                 Sleep(50)
     
124.                 nTry = nTry + 1
     
125.                 Call QueryServiceStatus(hSvcHandle, ss)
     
126.             End While
     
127.         End If
     
128.         StartDrv = CBool(ret)
     
129.     End Function
     
130. 
     
131.     Public Function OpenDrv() As Boolean
     
132.         Dim MyFile As String
     
133.         If (hDrvHandle <> INVALID_HANDLE_VALUE) Then OpenDrv = True : Exit Function
     
134.         MyFile = szDrvLinkName
     
135.         If Left(szDrvLinkName, Len("\\.")) <> "\\." Then
     
136.             MyFile = "\\." & szDrvLinkName
     
137.         End If
     
138.         hDrvHandle = CreateFile(MyFile, GENERIC_READ Or GENERIC_WRITE, 0, 0, OPEN_EXISTING, FILE_ATTRIBUTE_NORMAL, 0)
     
139.         OpenDrv = (hDrvHandle <> INVALID_HANDLE_VALUE)
     
140.     End Function
     
141. 
     
142.     Public Function IoControl(ByVal dwIoControlCode As Long, ByVal lpInBuffer As Long, ByVal nInBufferSize As Long, ByVal lpOutBuffer As Long, ByVal nOutBufferSize As Long, Optional ByRef lpBytesReturned As Long = 0) As Long
     
143.         Dim lDrvRetSize As Long
     
144.         Dim pOver As Long
     
145.         pOver = VirtualAlloc(0, 40, &H1000, &H4)
     
146.         IoControl = DeviceIoControl(hDrvHandle, dwIoControlCode, lpInBuffer, nInBufferSize, lpOutBuffer, nOutBufferSize, lDrvRetSize, pOver)
     
147.         VirtualFree(pOver, 40, &H4000)
     
148.         lpBytesReturned = lDrvRetSize
     
149.     End Function
     
150. 
     
151.     Public Function StopDrv() As Boolean
     
152.         Dim ss As SERVICE_STATUS
     
153.         StopDrv = CBool(ControlService(hSvcHandle, SERVICE_CONTROL_STOP, ss))
     
154.         Dim nTry As Long : nTry = 0
     
155.         Call QueryServiceStatus(hSvcHandle, ss)
     
156.         While ((ss.dwCurrentState = SERVICE_STOP_PENDING) And (nTry < 80))
     
157.             Sleep(50)
     
158.             nTry = nTry + 1
     
159.             Call QueryServiceStatus(hSvcHandle, ss)
     
160.         End While
     
161.     End Function
     
162. 
     
163.     Public Function DelDrv() As Boolean
     
164.         Call CloseHandle(hDrvHandle)
     
165.         Call StopDrv()
     
166.         Call DeleteService(hSvcHandle)
     
167.         Call CloseServiceHandle(hSvcHandle)
     
168.         Call CloseServiceHandle(scHandle)
     
169.         hSvcHandle = 0
     
170.         scHandle = 0
     
171.         DelDrv = True
     
172.     End Function
     
173. 
     
174.     '构造函数
     
175.     Sub New()
     
176.         hSvcHandle = 0
     
177.         scHandle = 0
     
178.         hDrvHandle = INVALID_HANDLE_VALUE
     
179.     End Sub
     
180. 
     
181.     Sub Terminate()
     
182.         DelDrv()
     
183.     End Sub
     
184. 
     
185.     Public Function CTL_CODE(ByVal lngDevFileSys As Long, ByVal lngFunction As Long, ByVal lngMethod As Long, ByVal lngAccess As Long) As Long
     
186.         CTL_CODE = CLng((lngDevFileSys * (2 ^ 16))) Or CLng((lngAccess * (2 ^ 14))) Or CLng((lngFunction * (2 ^ 2))) Or lngMethod
     
187.     End Function
     
188. 
     
189.     Public Function CTL_CODE_GEN(ByVal lngFunction As Long) As Long
     
190.         CTL_CODE_GEN = CLng((FILE_DEVICE_UNKNOWN * (2 ^ 16))) Or CLng((FILE_ANY_ACCESS * (2 ^ 14))) Or CLng((lngFunction * (2 ^ 2))) Or METHOD_BUFFERED
     
191.     End Function
     
192. End Class

复制代码

昨天这段代码调了半天老是出各种各样的错误，最后有梧桐牛在旁指点总算是搞定了。特此感谢。

Tesla.Angela

不错，当年我愣是没搞出来。

aisht

这个超级赞.
赶紧复制了一遍 转成了 C# ~~ (谁叫我习惯用C#

tangptr@126.com

aisht 发表于 2016-9-7 03:36
这个超级赞.
赶紧复制了一遍 转成了 C# ~~ (谁叫我习惯用C#

这代码有点坑，直接转可能会出问题。。。而且这是面向x64的，如果放32上需要修改类型。。。

Tesla.Angela

tangptr@126.com 发表于 2016-9-7 20:48
这代码有点坑，直接转可能会出问题。。。而且这是面向x64的，如果放32上需要修改类型。。。 ...

VB.NET有个类似SIZE_T的可变长度类型叫做INTPTR。

1. Dim x As IntPtr = 0
   
2. If IntPtr.Size = 4 Then
   
3.     x = &H7FFFFFFF
   
4.     MsgBox(Hex(x.ToInt32))
   
5. Else
   
6.     x = &H7FFFFFFFFFFFFFFF
   
7.     MsgBox(Hex(x.ToInt64))
   
8. End If

复制代码