搜索资源列表
CharFilter_Class
- CharFilter_Class实例是对CharFilter实例的完善。在CharFilter实例中,我们定义了四个全局变量,这不符合WDM驱动程序的要求,它限制了IRP的可重入性,我们应该使用局部变量。 该实例定义了一个READ_COMPLETION_INFO结构,当有DeviceControl 调用时,就分配一个结构对象,参数设置完后,就将该结构对象地址指针放在I.FileObject()->FsContext中。 -CharFilter_Class CharFilter e
loopback
- usb驱动及其测试程序(IRP包的循环传递演示)-usb drive and Testing Program (IRP packet transmission cycle demo)
hidefile
- 驱动开发:过滤Irp包来实现隐藏文件的代码
Irp-Files
- 直接IRP操作文件的实现问题,其实对于大部分接口(诸如: ZwReadFile、ZwWriteFile、ZwSetInformationFile、ZwDeleteFile等)在OSR上的“ Rolling Your Own - Building IRPs to Perform I/O ”一文中已经实现,但是那里面的实现还不够全。所以,我就翻出了前段时间在网上淘到的资料,特与大家共享!尤其值得注意的是,这里面还实现了ZwCreateFile接口! 大家都知道使用IRP的好处就是:效
Virtual_COM
- 虚拟串口设备源码,虚拟的串口为com7,回应com口标准的IRP.
CancelIRPTest.rar
- 介绍了驱动开发中取消IRP请求的想过操作。,Introduction drive the development of IRP cancellation requests thought to operate.
crypt_file.rar
- 可以对txt文本进行透明加解密,进行irp拦截进行加密,Txt text can be transparent encryption and decryption, to intercept encrypted irp
IRP
- 这是一个irp文档资料,不可多得,对irp有一个非常好的介绍。请下载学习。-This is a irp documentation, rare, and irp has a very good introduction. Download the study.
Roll-Your-Own
- osronline上的用构造IRP实现复制文件操作,用来了解IRP流程-osronline with tectonic IRP operation, used to copy files to understand the IRP process
KeyFilter
- KeyFilter program to keybord IRP about windows driver -KeyFilter programto keybord IRP about windows driver
usbbulk
- Usbbulk的一个例子程序,这里只是一个程序框架,可以在此基层上添加自己的Irp处理。-An example of Usbbulk procedures, here is just a procedural framework, you can add at this grass-roots level to deal with their own Irp.
IRP
- 不必多说,驱动开发必需弄懂的概念之一,IRP,I/O Request Packets-Many do not have to say that drivers need to understand the concept of developing one, IRP, I/O Request Packets
Kehook
- 对于hook,从ring3有很多,ring3到ring0也有很多,根据api调用环节递进的顺序,在每一个环节都有hook的机会,可以有int 2e或者sysenter hook,ssdt hook,inline hook ,irp hook,object hook,idt hook-The hook, from ring3 there are many, ring3 to ring0 there are many, according to api call progressive sequen
IRP
- 从零学驱动(二)驱动与应用层简单消息通信。一个简单的消息通信程序,即sys与exe互传了一句话给对方。-Studies from zero drive (2)
IRP
- 关于windows驱动的IRP格式详细解释。写的很详细。很好的学习资料。-IRP on the windows-driven format of a detailed explanation. Written in great detail. A very good learning materials.
MouseRepairExp2
- 鼠标修复源代码,IRP HOOK实现 修复: 拖拽不好使 滚轮不听话 单击变双击 支持了鼠标的动态加载、卸载 -Mouse fix the source code, IRP HOOK achieve the fix: drag and drop so bad wheel disobedient changed double-click mouse support dynamic loading, unloading
The_Windows_XP_IRP_Completion_Primer
- IRP Completion Primer
IRP
- 一份驱动程序设计中,有关IRP的说明文档-The design of a driver, the IRP' s documentation
IRP
- 所有驱动开发人员都要知道的知识,在微软的Windows 操作系统家族中,都通过发送I/O 请求包(IRP, I/o Request Packets)来进行和驱动程序的通讯。-Driver developers must know all knowledge of Microsoft' s Windows operating system in the family, all by sending I/O request packet (IRP, I/o Request Packets),
