IRP的创建

1. 自己在编写驱动程序的时候 遇到一些疑问: IoBuildSynchronousFsdRequest 和IoBuildAsynchronousFsdRequest之间创建的同步异步IRP有什么区别？
2. 为什么这两个函数只能创建几种IRP？调用IoAllocateIrp后 初始化IRP时哪些域是要填充的  哪些是不要填充的？
3. 偏偏书上讲的都很模糊  驱动新手  一切只能自己动手。
4. 先来看下 IoBuildSynchronousFsdRequest
6. .text:004191D6 _IoBuildSynchronousFsdRequest@28 proc near
7. .text:004191D6                                         ; CODE XREF: HalExamineMBR(x,x,x,x)+70p
8. .text:004191D6                                         ; IopShutdownBaseFileSystems(x)+7Ap ...
9. .text:004191D6
10. .text:004191D6 MajorFunction   = dword ptr  8
11. .text:004191D6 DeviceObject    = dword ptr  0Ch
12. .text:004191D6 Buffer          = dword ptr  10h
13. .text:004191D6 Length          = dword ptr  14h
14. .text:004191D6 StartingOffset  = dword ptr  18h
15. .text:004191D6 Event           = dword ptr  1Ch
16. .text:004191D6 IoStatusBlock   = dword ptr  20h
17. .text:004191D6
18. .text:004191D6                 mov     edi, edi
19. .text:004191D8                 push    ebp
20. .text:004191D9                 mov     ebp, esp
21. .text:004191DB                 push    edi
22. .text:004191DC                 push    [ebp+IoStatusBlock] ; IoStatusBlock
23. .text:004191DF                 push    [ebp+StartingOffset] ; StartingOffset
24. .text:004191E2                 push    [ebp+Length]    ; Length
25. .text:004191E5                 push    [ebp+Buffer]    ; Buffer
26. .text:004191E8                 push    [ebp+DeviceObject] ; DeviceObject
27. .text:004191EB                 push    [ebp+MajorFunction] ; MajorFunction
28. .text:004191EE                 call    _IoBuildAsynchronousFsdRequest@24 ; 创建同步IRP  实质上还是创建异步IRP
29. .text:004191F3                 mov     edi, eax        ; pIrp送EDI 检验IRP是否创建成功
30. .text:004191F5                 test    edi, edi        ; pIrp
31. .text:004191F7                 jz      short loc_41922D
32. .text:004191F9                 mov     eax, [ebp+Event] ; event
33. .text:004191FC                 push    ebx
34. .text:004191FD                 push    esi
35. .text:004191FE                 mov     cl, 1
36. .text:00419200                 mov     [edi+2Ch], eax  ; pIrp->UserEvent = event
37. .text:00419203                 call    ds:__imp_@KfRaiseIrql@4 ; movzx   edx,cl
38. .text:00419203                                         ; movzx   ecx,byte ptr [edx-7F92EDA8h]
39. .text:00419203                                         ; mov     eax,dword ptr ds:[FFFE0080h];TPR寄存器中当前任务优先级送eax
40. .text:00419203                                         ; mov     dword ptr ds:[0FFFE0080h],ecx;装入新的任务优先级
41. .text:00419203                                         ; shr     eax,4;任务优先级/16
42. .text:00419203                                         ; movzx   eax,byte ptr [eax-7F923F78h]返回优先级
43. .text:00419203                                         ; ret 中断级和任务优先级的换算 还要依靠806D1258和806DC088这两个地方的表或者结构
44. .text:00419203                                         ; 对任务优先级不甚明白  以后有时间再仔细看看
45. .text:00419203                                         ;
46. .text:00419209                 mov     edx, [edi+50h]  ; pIrp->Tail.overlay.Thread
47. .text:00419209                                         ; edx值为ETHREAD的指针
48. .text:0041920C                 add     edx, 210h       ; &ETHREAD.IrpList
49. .text:0041920C                                         ; edx值为ETHREAD.IrpList的指针