初学驱动开发-windows驱动-helloWorld

1.准备工作-安装vm虚拟机+虚拟机下安装xp

2.下载DriverMonitor+DebugView

3.编写代码

 
#ifdef __cplusplus
extern "C"
{
#endif
#include 
   
   
    
    
#ifdef __cplusplus
}
#endif 

#define PAGEDCODE code_seg("PAGE")
#define LOCKEDCODE code_seg()
#define INITCODE code_seg("INIT")

#define PAGEDDATA data_seg("PAGE")
#define LOCKEDDATA data_seg()
#define INITDATA data_seg("INIT")

#define arraysize(p) (sizeof(p)/sizeof((p)[0]))

typedef struct _DEVICE_EXTENSION {
	PDEVICE_OBJECT pDevice;
	UNICODE_STRING ustrDeviceName;	//设备名称
	UNICODE_STRING ustrSymLinkName;	//符号链接名
} DEVICE_EXTENSION, *PDEVICE_EXTENSION;

/************************************************************************
* 函数名称:LoadDevice
* 功能描述:加载设备对象，如果存在则使用现有设备对象，如果不存在则创建新的设备对象 
*************************************************************************/
#pragma INITCODE
NTSTATUS LoadDevice (
		IN PDRIVER_OBJECT	pDriverObject,
		IN PCWSTR          SourceString)
{
	NTSTATUS status;
	PDEVICE_OBJECT pDevObj;
	PDEVICE_EXTENSION pDevExt; 
	UNICODE_STRING devName;
	//设备名称
	RtlInitUnicodeString(&devName,SourceString);
	
	//创建设备
	status = IoCreateDevice( pDriverObject,
						sizeof(DEVICE_EXTENSION),
						&(UNICODE_STRING)devName,
						FILE_DEVICE_UNKNOWN,
						0, TRUE,
						&pDevObj );
	if (!NT_SUCCESS(status))
    {
		RtlFreeUnicodeString( &devName );
		return status;
	}
	
	RtlZeroMemory(pDevObj->DeviceExtension, sizeof(DEVICE_EXTENSION));
	pDevExt = (PDEVICE_EXTENSION)pDevObj->DeviceExtension;
	pDevObj->Flags |= DO_BUFFERED_IO; 
	pDevExt->pDevice = pDevObj;
	pDevExt->ustrDeviceName = devName;
	//创建符号链接
	UNICODE_STRING symLinkName;
	RtlInitUnicodeString(&symLinkName,L"\\??\\HelloDDK");
	pDevExt->ustrSymLinkName = symLinkName;
	status = IoCreateSymbolicLink( &symLinkName,&devName );
	if (!NT_SUCCESS(status)) 
	{
		IoDeleteDevice( pDevObj );
		RtlFreeUnicodeString( &devName );
		RtlFreeUnicodeString( &symLinkName );
		return status;
	} 
	return STATUS_SUCCESS;
}

/************************************************************************
* 函数名称:UnloadDevice 
* 功能描述:卸载驱动设备 
*************************************************************************/
#pragma PAGEDCODE
VOID UnloadDevice (IN PDRIVER_OBJECT pDriverObject) 
{
	PDEVICE_OBJECT	pNextObj;
	KdPrint(("Enter DriverUnload\n"));
	pNextObj = pDriverObject->DeviceObject;
	while (pNextObj != NULL) 
	{
		PDEVICE_EXTENSION pDevExt = (PDEVICE_EXTENSION)
			pNextObj->DeviceExtension;

		//删除符号链接
		UNICODE_STRING pLinkName = pDevExt->ustrSymLinkName;
		IoDeleteSymbolicLink(&pLinkName);
		pNextObj = pNextObj->NextDevice;
		IoDeleteDevice( pDevExt->pDevice );
	}
} 
/************************************************************************
* 函数名称:DriverEntry
* 功能描述:驱动程序入口函数 
*************************************************************************/
#pragma INITCODE
extern "C" NTSTATUS DriverEntry (
			IN PDRIVER_OBJECT pDriverObject,
			IN PUNICODE_STRING pRegistryPath	) 
{
	NTSTATUS status;
	KdPrint(("Enter DriverEntry\n"));
	
	KdPrint(("Hello World Driver\n"));
	KdPrint(("pRegistryPath：%ws\n", pRegistryPath->Buffer)); //信息
	//创建驱动设备对象
	status = LoadDevice(pDriverObject, L"\\Device\\HelloWordDDKDevice");

	//卸载驱动设备对象
	pDriverObject->DriverUnload = UnloadDevice; 
	

	KdPrint(("DriverEntry end\n"));
	return status;
}
   
   

编写makefile+sources文件

makefile 文件

#
# DO NOT EDIT THIS FILE!!!  Edit .\sources. If you want to add a new source
# file to this component.  This file merely indirects to the real make file
# that is shared by all the driver components of the Windows NT DDK
#


!INCLUDE $(NTMAKEENV)\makefile.def

sources 文件

TARGETNAME=HelloDDK
TARGETTYPE=DRIVER
TARGETPATH=OBJ
 
SOURCES=HelloWord.cpp\

4.生成.sys文件

5.拷贝.sys文件到虚拟机

6.使用DriverMonitor加载驱动并且用DebugView查看输出