理解驱动对象（DriverObject）

每个驱动程序都会有唯一一个驱动对象表示，驱动对象是对驱动程序的实例化。她由Ring0层的执行体组件中的IO管理器负责加载，并且每个驱动只加载一个实例。在wdm.h头文件中。DriverObject结构如下：

typedef struct _DRIVER_OBJECT {
    CSHORT Type;
    CSHORT Size;

    //
    // The following links all of the devices created by a single driver
    // together on a list, and the Flags word provides an extensible flag
    // location for driver objects.
    //

    PDEVICE_OBJECT DeviceObject;
    ULONG Flags;

    //
    // The following section describes where the driver is loaded.  The count
    // field is used to count the number of times the driver has had its
    // registered reinitialization routine invoked.
    //

    PVOID DriverStart;
    ULONG DriverSize;
    PVOID DriverSection;
    PDRIVER_EXTENSION DriverExtension;

    //
    // The driver name field is used by the error log thread
    /