Windows内核安全编程从入门到实践（高级编程）

#include “stdafx.h“

void GetOpenBlockUnload（IN PDRIVER_object Driverobject）;
NTSTATUS GetOpenBlockCreateClose（IN PDEVICE_object Deviceobject IN PIRP Irp）;
NTSTATUS GetOpenBlockDefaultHandler（IN PDEVICE_object Deviceobject IN PIRP Irp）;

NTSTATUS DriverEntry（IN PDRIVER_object Driverobject IN PUNICODE_STRING  RegistryPath）
{
	UNICODE_STRING DeviceNameWin32Device;
	PDEVICE_object Deviceobject = NULL;
	NTSTATUS status;
	unsigned i;

	RtlInitUnicodeString（&DeviceNameL“\Device\GetOpenBlock0“）;
	RtlInitUnicodeString（&Win32DeviceL“\DosDevices\GetOpenBlock0“）;

	for （i = 0; i <= IRP_MJ_MAXIMUM_FUNCTION; i++）
		Driverobject->MajorFunction[i] = GetOpenBlockDefaultHandler;

	Driverobject->MajorFunction[IRP_MJ_CREATE] = GetOpenBlockCreateClose;
	Driverobject->MajorFunction[IRP_MJ_CLOSE] = GetOpenBlockCreateClose;
	
	Driverobject->DriverUnload = GetOpenBlockUnload;
	status = IoCreateDevice（Driverobject
							0
							&DeviceName
							FILE_DEVICE_UNKNOWN
							0
							FALSE
							&Deviceobject）;
	if （!NT_SUCCESS（status））
		return status;
	if （!Deviceobject）
		return STATUS_UNEXPECTED_IO_ERROR;

	Deviceobject->Flags |= DO_DIRECT_IO;
	Deviceobject->AlignmentRequirement = FILE_WORD_ALIGNMENT;
	status = IoCreateSymboliclink（&Win32Device &DeviceName）;

	Deviceobject->Flags &= ~DO_DEVICE_INITIALIZING;

	ShowOpenBlock（Driverobject）;

	return STATUS_SUCCESS;
}

void GetOpenBlockUnload（IN PDRIVER_object Driverobject）
{
	UNICODE_STRING Win32Device;
	RtlInitUnicodeString（&Win32DeviceL“\DosDevices\GetOpenBlock0“）;
	IoDeleteSymboliclink（&Win32Device）;
	IoDeleteDevice（Driverobject->Deviceobject）;
}

NTSTATUS GetOpenBlockCreateClose（IN PDEVICE_object Deviceobject IN PIRP Irp）
{
	Irp->IoStatus.Status = STATUS_SUCCESS;
	Irp->IoStatus.Information = 0;
	IoCompleteRequest（Irp IO_NO_INCREMENT）;
	return STATUS_SUCCESS;
}

NTSTATUS GetOpenBlockDefaultHandler（IN PDEVICE_object Deviceobject IN PIRP Irp）
{
	Irp->IoStatus.Status = STATUS_NOT_SUPPORTED;
	Irp->IoStatus.Information = 0;
	IoCompleteRequest（Irp IO_NO_INCREMENT）;
	return Irp->IoStatus.Status;
}

 属性            大小     日期    时间   名称
----------- ---------  ---------- -----  ----

     文件       2150  2010-07-30 18:45  Projectschapter 10 网络GetNDISOpenBlockGetOpenBlockGetOpenBlockGetOpenBlock.cpp

     文件       1242  2010-07-30 15:02  Projectschapter 10 网络GetNDISOpenBlockGetOpenBlockGetOpenBlockGetOpenBlock.sln

    ..A..H.     23148  2010-07-31 15:16  Projectschapter 10 网络GetNDISOpenBlockGetOpenBlockGetOpenBlockGetOpenBlock.suo

     文件       9887  2010-07-30 22:52  Projectschapter 10 网络GetNDISOpenBlockGetOpenBlockGetOpenBlockGetOpenBlock.vcproj

     文件       2615  2010-07-31 15:16  Projectschapter 10 网络GetNDISOpenBlockGetOpenBlockGetOpenBlockGetOpenBlock.vcproj.L01-PC.L01.user

     文件        408  2010-07-30 15:02  Projectschapter 10 网络GetNDISOpenBlockGetOpenBlockGetOpenBlockGetOpenBlock.Win32.vddklaunch

     文件        408  2010-07-30 15:02  Projectschapter 10 网络GetNDISOpenBlockGetOpenBlockGetOpenBlockGetOpenBlock.x64.vddklaunch

     文件       7143  2010-07-31 14:59  Projectschapter 10 网络GetNDISOpenBlockGetOpenBlockGetOpenBlockOpenBlock.cpp

     文件       2185  2010-07-31 14:57  Projectschapter 10 网络GetNDISOpenBlockGetOpenBlockGetOpenBlockOpenBlock.h

     文件         70  2010-07-30 15:02  Projectschapter 10 网络GetNDISOpenBlockGetOpenBlockGetOpenBlockstdafx.cpp

     文件        542  2010-07-30 22:31  Projectschapter 10 网络GetNDISOpenBlockGetOpenBlockGetOpenBlockstdafx.h

     文件       1055  2010-07-30 15:02  Projectschapter 10 网络GetNDISOpenBlockGetOpenBlockGetOpenBlockVisualDDKHelpers.h

     文件       2332  2010-07-31 15:21  Projectschapter 10 网络GetNDISOpenBlockGetOpenBlockByDriverobjectGetOpenBlockByDriverobjectGetOpenBlockByDriverobject.cpp

     文件       1271  2011-01-20 19:43  Projectschapter 10 网络GetNDISOpenBlockGetOpenBlockByDriverobjectGetOpenBlockByDriverobjectGetOpenBlockByDriverobject.sln

    ..A..H.     24576  2011-02-17 20:30  Projectschapter 10 网络GetNDISOpenBlockGetOpenBlockByDriverobjectGetOpenBlockByDriverobjectGetOpenBlockByDriverobject.suo

     文件      10018  2011-01-20 19:43  Projectschapter 10 网络GetNDISOpenBlockGetOpenBlockByDriverobjectGetOpenBlockByDriverobjectGetOpenBlockByDriverobject.vcproj

     文件       1409  2011-02-17 20:30  Projectschapter 10 网络GetNDISOpenBlockGetOpenBlockByDriverobjectGetOpenBlockByDriverobjectGetOpenBlockByDriverobject.vcproj.L01-PC.L01.user

     文件        450  2010-07-31 15:20  Projectschapter 10 网络GetNDISOpenBlockGetOpenBlockByDriverobjectGetOpenBlockByDriverobjectGetOpenBlockByDriverobject.Win32.vddklaunch

     文件        450  2010-07-31 15:20  Projectschapter 10 网络GetNDISOpenBlockGetOpenBlockByDriverobjectGetOpenBlockByDriverobjectGetOpenBlockByDriverobject.x64.vddklaunch

     文件      11373  2011-02-17 14:51  Projectschapter 10 网络GetNDISOpenBlockGetOpenBlockByDriverobjectGetOpenBlockByDriverobjectShowOpenBlock.cpp

     文件       4533  2010-08-01 19:44  Projectschapter 10 网络GetNDISOpenBlockGetOpenBlockByDriverobjectGetOpenBlockByDriverobjectShowOpenBlock.h

     文件         70  2010-07-31 15:20  Projectschapter 10 网络GetNDISOpenBlockGetOpenBlockByDriverobjectGetOpenBlockByDriverobjectstdafx.cpp

     文件        518  2010-07-31 21:21  Projectschapter 10 网络GetNDISOpenBlockGetOpenBlockByDriverobjectGetOpenBlockByDriverobjectstdafx.h

     文件       1786  2011-01-20 19:43  Projectschapter 10 网络GetNDISOpenBlockGetOpenBlockByDriverobjectGetOpenBlockByDriverobjectUpgradeLog.xml

     文件       1055  2010-07-31 15:20  Projectschapter 10 网络GetNDISOpenBlockGetOpenBlockByDriverobjectGetOpenBlockByDriverobjectVisualDDKHelpers.h

     文件       3348  2011-01-20 19:43  Projectschapter 10 网络GetNDISOpenBlockGetOpenBlockByDriverobjectGetOpenBlockByDriverobject\_UpgradeReport_FilesUpgradeReport.css

     文件      12505  2008-01-11 01:25  Projectschapter 10 网络GetNDISOpenBlockGetOpenBlockByDriverobjectGetOpenBlockByDriverobject\_UpgradeReport_FilesUpgradeReport.xslt

     文件         69  2011-01-20 19:43  Projectschapter 10 网络GetNDISOpenBlockGetOpenBlockByDriverobjectGetOpenBlockByDriverobject\_UpgradeReport_FilesUpgradeReport_Minus.gif

     文件         71  2011-01-20 19:43  Projectschapter 10 网络GetNDISOpenBlockGetOpenBlockByDriverobjectGetOpenBlockByDriverobject\_UpgradeReport_FilesUpgradeReport_Plus.gif

     文件       1082  2010-07-31 23:17  Projectschapter 10 网络GetNDISOpenBlockReadme.txt

............此处省略260个文件信息