為添加默認(rèn)派遣例程

1、預(yù)計(jì)平均三天一課，錄制過程中，大綱會(huì)實(shí)時(shí)更新(更改)主講：郁金香灬老師開發(fā)環(huán)境：VC6，VS2003，VS2008地址 HYPERLINK http:/y/ :http:/y1.3.8為DDK_oWorld添加默認(rèn)派遣例程-16課A、初識(shí)IRPB、一個(gè)簡(jiǎn)單的IRP處理函數(shù)C、IR、oSus結(jié)構(gòu)pleteRequest函數(shù)IPR 簡(jiǎn)介：IRP 全稱(I/O Request Package),即輸入輸出請(qǐng)求包。他是 windows 驅(qū)動(dòng)的重要概念，用戶模式下所有對(duì)驅(qū)動(dòng)程序的 I/O 請(qǐng)求，全部由操作系統(tǒng)轉(zhuǎn)化為一個(gè)叫做 IRP 的數(shù)據(jù)結(jié)構(gòu)，不同的 IRP 數(shù)據(jù)會(huì)被“派遺”到不同的派遣函數(shù)(DisPa

2、tch Function)中。作用：上層應(yīng)用程序與底層驅(qū)動(dòng)通信。EXE 程序與 SYS五種常用的 IRP 類型:#define IRP_MJ_CREATE #define IRP_MJ_CLOSE #define IRP_MJ_READ #define IRP_MJ_WRITE#define IRP_MJ_DEVICE_CONTROL0 x00 /CreateFile() 0 x02 /CloseHandle() 0 x03/ReadFile 0 x04/WriteFile0 x0e/DeviceIoControl過程：1、創(chuàng)建IRP 處理函數(shù)2、在驅(qū)動(dòng)函數(shù)里DriverEntry()IRP

3、處理函數(shù)3、細(xì)化IRP 函數(shù)相關(guān)內(nèi)核A ：/獲取指定IRP 的?？臻g地址O_STACK_LOCATION IoGetCurrentIrpStackLocation( INRrp );VOID IN IN);pleteRequest(Rrp,/指定需要完成的 IPR CCHAR PriorityBoost /方法 1：派遺函數(shù)/派遺函數(shù)pDriverObject-MajorFunctionIRP_MJ_CREATE=ddk_DispatchRoutine;/派遺函數(shù)pDriverObject-MajorFunctionIRP_MJ_CLOSE=ddk_DispatchRoutine;/派遺函數(shù)p

4、DriverObject-MajorFunctionIRP_MJ_READ=ddk_DispatchRoutine;/派遺函數(shù)pDriverObject-MajorFunctionIRP_MJ_WRITE=ddk_DispatchRoutine;/派遺函數(shù)pDriverObject-MajorFunction IRP_MJ_DEVICE_CONTROL=ddk_DispatchRoutine;NTSUS ddk_DispatchRoutine(IN PDEVICE_OBJECT pDevobj,INRPrp)O_STACK_LOCATION irps switch (irpsp-MajorFu

5、nction)case IRP_MJ_CREATE: break;case IRP_MJ_CLOSE: break;case IRP_MJ_READ: break;case IRP_MJ_WRITE:break;oGetCurrentIrpStackLocation(rp);case IRP_MJ_DEVICE_CONTROL:break; default:KdPr (其它處理);/指示完成此IRP/成功返回return SUS_SUCS;/方法二：分開/派遺函數(shù)pDriverObject-MajorFunctionIRP_MJ_CREATE=ddk_DispatchRoutine_CREAT

6、E;/派遺函數(shù)pDriverObject-MajorFunctionIRP_MJ_CLOSE=ddk_DispatchRoutine_CLOSE;/派遺函數(shù)pDriverObject-MajorFunctionIRP_MJ_READ=ddk_DispatchRoutine_READ;/派遺函數(shù)pDriverObject-MajorFunctionIRP_MJ_WRITE=ddk_DispatchRoutine_WRITE;/派遺函數(shù)pDriverObject-MajorFunction IRP_MJ_DEVICE_CONTROL=ddk_DispatchRoutine_CONTROL;NTSUS ddk_DispatchRoutine_CONTROL(IN PDEVICE_OBJECT pDevobj,INRP rp)/對(duì)相應(yīng)的IPR進(jìn)行處理rp-IoS us.Information=0;/設(shè)置操作的字節(jié)數(shù)為0，這里無實(shí)際意義rp-IoS us.S