|
楼主 |
发表于 2010-8-8 21:31:05
|
显示全部楼层
好了,
终于成功了
#include <ntddk.h>
VOID Unload(IN PDRIVER_OBJECT DriverObject)
{
}
NTSTATUS DriverEntry(IN PDRIVER_OBJECT DriverObject,IN PUNICODE_STRING RegistryPath)
{
HANDLE hFile=NULL;
IO_STATUS_BLOCK ioStatus;
NTSTATUS ntStatus;
OBJECT_ATTRIBUTES oa;
UNICODE_STRING usPath;
RtlInitUnicodeString(&usPath,L"\\??\\c:\\ok100fen.txt");
InitializeObjectAttributes(&oa,&usPath,OBJ_KERNEL_HANDLE|OBJ_CASE_INSENSITIVE,NULL,NULL);
ntStatus=ZwCreateFile(
&hFile,
GENERIC_READ|GENERIC_WRITE,
&oa,
&ioStatus,
NULL,
FILE_ATTRIBUTE_NORMAL,
FILE_SHARE_READ,
FILE_OPEN_IF,
FILE_NON_DIRECTORY_FILE|FILE_RANDOM_ACCESS|FILE_SYNCHRONOUS_IO_NONALERT,
NULL,
0);
ntStatus=ZwWriteFile(
hFile,
NULL,
NULL,
NULL,
&ioStatus,
usPath.Buffer,
usPath.Length,
NULL,
NULL);
ZwClose(hFile);
DriverObject->DriverUnload = Unload;
return STATUS_SUCCESS;
} |
|