通过驱动名称枚举驱动下设备和挂载设备的信息

最新推荐文章于 2022-04-29 09:16:13 发布
最新推荐文章于 2022-04-29 09:16:13 发布
阅读量1.6k 收藏 1
点赞数
分类专栏： windows驱动编程
版权声明：本文为博主原创文章，遵循 CC 4.0 BY-SA 版权协议，转载请附上原文出处链接和本声明。
本文链接：https://blog.csdn.net/wsgxiaomianao/article/details/34850421
版权

说明：

exe程序通过打开驱动的设备，然后使用DeviceIOCtrl发送一个IOCtrl码，并将将要显示的驱动程序的名称传递给驱动程序，驱动程序受到IOCtrl码并接收到驱动程序的名称，调用枚举设备信息函数。


应用程序代码：

// ShowDeviceInfo.cpp : 定义控制台应用程序的入口点。
//

#include "stdafx.h"
#include "ShowDeviceInfo.h"

#ifdef _DEBUG
#define new DEBUG_NEW
#endif


// 唯一的应用程序对象

CWinApp theApp;

using namespace std;
#define CTL_CODE( DeviceType, Function, Method, Access ) (                 \
	((DeviceType) << 16) | ((Access) << 14) | ((Function) << 2) | (Method) \
	)
const ULONG IOCTL_ENUMDEV_DEVNAME = CTL_CODE(0x8000, 0x01, 0, 0x0001 | 0x0002);

int _tmain(int argc, TCHAR* argv[], TCHAR* envp[])
{
	int nRetCode = 0;

	// 初始化 MFC 并在失败时显示错误
	if (!AfxWinInit(::GetModuleHandle(NULL), NULL, ::GetCommandLine(), 0))
	{
		// TODO: 更改错误代码以符合您的需要
		_tprintf(_T("错误: MFC 初始化失败\n"));
		nRetCode = 1;
	}
	else
	{
		// TODO: 在此处为应用程序的行为编写代码。
	}


	HANDLE hdl = CreateFile(L"\\\\.\\ENUMDEV_DeviceName",
		GENERIC_WRITE | GENERIC_READ,0,NULL,OPEN_EXISTING,FILE_ATTRIBUTE_NORMAL ,NULL);
	if (hdl == INVALID_HANDLE_VALUE)
	{
		CString csLog;
		csLog.Format(L"CreateFile Error:%d",GetLastError());
		AfxMessageBox(csLog);
		return -1;
	}

	WCHAR *DriName = L"\\Driver\\ACPI";
	DWORD dwInLen = wcslen(DriName)*2+2;

	DWORD dwRetLen;
	BOOL bRetRead = DeviceIoControl(hdl,IOCTL_ENUMDEV_DEVNAME,DriName,dwInLen,NULL,0,&dwRetLen,NULL);
	if (bRetRead)
	{
		cout<<"DeviceIoControl OK!"<<endl;
	}


	CloseHandle(hdl);

	system("PAUSE");


	return nRetCode;
}

驱动程序代码： 

///
///
/// Copyright (c) 2014 - <company name here>
///
/// Original filename: EnumDev.cpp
/// Project          : EnumDev
/// Date of creation : 2014-06-26
/// Author(s)        : <author name(s)>
///
/// Purpose          : <description>
///
/// Revisions:
///  0000 [2014-06-26] Initial revision.
///
///

// $Id$

#ifdef __cplusplus
extern "C" {
#endif
#include <ntddk.h>
#include <string.h>
#ifdef __cplusplus
}; // extern "C"
#endif

#include "EnumDev.h"

#ifdef __cplusplus
namespace { // anonymous namespace to limit the scope of this global variable!
#endif
PDRIVER_OBJECT pdoGlobalDrvObj = 0;
#ifdef __cplusplus
}; // anonymous namespace
#endif


#define DEVICE_NAME			"\\Device\\ENUMDEV_DeviceName"
#define SYMLINK_NAME		"\\DosDevices\\ENUMDEV_DeviceName"
PRESET_UNICODE_STRING(usDeviceName, DEVICE_NAME);
PRESET_UNICODE_STRING(usSymlinkName, SYMLINK_NAME);

#ifndef FILE_DEVICE_ENUMDEV
#define FILE_DEVICE_ENUMDEV 0x8000
#endif



const ULONG IOCTL_ENUMDEV_DEVNAME = CTL_CODE(FILE_DEVICE_ENUMDEV, 0x01, METHOD_BUFFERED, FILE_READ_DATA | FILE_WRITE_DATA);



#if __cplusplus
extern "C"
{
#endif

#include <ntddk.h>
#pragma  comment(lib"ntoskrnl.lib")

	NTKERNELAPI NTSTATUS ObReferenceObjectByName(
		IN PUNICODE_STRING ObjectName,
		IN ULONG Attributes,
		IN PACCESS_STATE PassedAccessState OPTIONAL,
		IN ACCESS_MASK DesiredAccess OPTIONAL,
		IN POBJECT_TYPE ObjectType,
		IN KPROCESSOR_MODE AccessMode,
		IN OUT PVOID ParseContent OPTIONAL,
		OUT PVOID *Object);

	NTKERNELAPI NTAPI IoGetBaseFileSystemDeviceObject(
		IN PFILE_OBJECT FileObject);

	extern POBJECT_TYPE *IoDriverObjectType;
	//extern POBJECT_TYPE *IoDeviceObjectType;
#if __cplusplus
};
#endif

typedef struct _DEVICE_EXTENSION 
{
	PDEVICE_OBJECT pDevObj;
	UNICODE_STRING usDevName;
	UNICODE_STRING usLinkName;

	PUCHAR buffer;
	ULONG fileLen;
}DEVICE_EXTENSION,*PDEVICE_EXTENSION;


typedef struct _OBJECT_CREATE_INFORMATION 
{
	ULONG Attributes;
	HANDLE RootDirectory;
	PVOID ParseContext;
	KPROCESSOR_MODE ProbeMode;
	ULONG PagedPoolCharge;
	ULONG NonPagedPoolCharge;
	ULONG SecurityDescriptorCharge;
	PSECURITY_DESCRIPTOR SecurityDescriptor;
	PSECURITY_QUALITY_OF_SERVICE SecurityQos;
	SECURITY_QUALITY_OF_SERVICE SecurityQualityOfService;

}OBJECT_CREATE_INFORMATION,*POBJECT_CREATE_INFORMATION;

typedef struct _OBJECT_HEADER 
{
	LONG PointerCount;
	union
	{
		LONG HandleCount;
		PSINGLE_LIST_ENTRY SEntry;
	};
	POBJECT_TYPE Type;
	UCHAR NameInfoOffset;
	UCHAR HandleInfoOffset;
	UCHAR QuotaInfoOffset;
	UCHAR Flags;
	union
	{
		POBJECT_CREATE_INFORMATION ObjectCreateInfo;
		PVOID QuotaBlockCharged;
	};

	PSECURITY_DESCRIPTOR SecurityDescriptor;
	QUAD Body;

}OBJECT_HEADER,*POBJECT_HEADER;


#define  NUMBER_HASH_BUCKETS 37

typedef struct _OBJECT_DIRECTORY 
{
	struct _OBJECT_DIRECTORY_ENTRY* HashBuckets[NUMBER_HASH_BUCKETS];
	struct _OBJECT_DIRECTORY_ENTRY** LookupBucket;
	BOOLEAN LookupFound;
	USHORT SymbolicLinkUsageCount;
	struct _DEVICE_MAP* DeviceMap;

}OBJECT_DIRECTORY,*POBJECT_DIRECTORY;


typedef struct _OBJECT_HEADER_NAME_INFO
{
	POBJECT_DIRECTORY Directory;
	UNICODE_STRING Name;
	ULONG Reserved;
#if DBG
	ULONG Reserved2 ;
	LONG DbgDereferenceCount ;
#endif
} OBJECT_HEADER_NAME_INFO, * POBJECT_HEADER_NAME_INFO;

#define OBJECT_TO_OBJECT_HEADER( o ) \
	CONTAINING_RECORD( (o), OBJECT_HEADER, Body )

#define OBJECT_HEADER_TO_NAME_INFO( oh ) ((POBJECT_HEADER_NAME_INFO) \
	((oh)->NameInfoOffset == 0 ? NULL : ((PCHAR)(oh) - (oh)->NameInfoOffset)))


NTSTATUS ENUMDEV_DispatchCreateClose(
    IN PDEVICE_OBJECT		DeviceObject,
    IN PIRP					Irp
    )
{
    NTSTATUS status = STATUS_SUCCESS;
    Irp->IoStatus.Status = status;
    Irp->IoStatus.Information = 0;
    IoCompleteRequest(Irp, IO_NO_INCREMENT);
    return status;
}


VOID ENUMDEV_DriverUnload(
    IN PDRIVER_OBJECT		DriverObject
    )
{
    PDEVICE_OBJECT pdoNextDeviceObj = pdoGlobalDrvObj->DeviceObject;
    IoDeleteSymbolicLink(&usSymlinkName);

    // Delete all the device objects
    while(pdoNextDeviceObj)
    {
        PDEVICE_OBJECT pdoThisDeviceObj = pdoNextDeviceObj;
        pdoNextDeviceObj = pdoThisDeviceObj->NextDevice;
        IoDeleteDevice(pdoThisDeviceObj);
    }
}


VOID GetDeviceObjectInfo(PDEVICE_OBJECT pDevObj)
{

	POBJECT_HEADER pObjectHeader;
	POBJECT_HEADER_NAME_INFO pObjectHeaderNameInfo;

	if (pDevObj == NULL)
	{
		KdPrint(("GetDeviceObjectInfo::pDevObj is NULL...\n"));
		return;
	}

	pObjectHeader = OBJECT_TO_OBJECT_HEADER(pDevObj);//得到对象头

	if (pObjectHeader)
	{
		//查询设备名称并打印
		pObjectHeaderNameInfo = OBJECT_HEADER_TO_NAME_INFO(pObjectHeader);
		if (pObjectHeaderNameInfo && pObjectHeaderNameInfo->Name.Buffer)
		{
			KdPrint(("Driver Name:%wZ - Device Name:%wZ - Driver Address:0x%x - Device Address:0x%x\n",
				&pDevObj->DriverObject->DriverName,
				&pObjectHeaderNameInfo->Name,
				pDevObj->DriverObject,
				pDevObj ));
		}else if (pDevObj->DriverObject) //没有设备名称
		{
			KdPrint(("Driver Name:%wZ - Device Name:%S - Driver Address:0x%x - Device Address:0x%x\n",
				&pDevObj->DriverObject->DriverName,
				L"NULL",
				pDevObj->DriverObject,
				pDevObj));

		}
	}

}

VOID getAttachedDevInfo(PDEVICE_OBJECT pDevObj)
{
	PDEVICE_OBJECT pDeviceObject;
	if (pDevObj == NULL)
	{
		return ;
	}

	pDeviceObject = pDevObj->AttachedDevice;//获取设备上的挂载设备

	while(pDeviceObject)
	{
		KdPrint(( "Attached Driver Name:%wZ,Attached Driver Address:0x%x,Attached DeviceAddress:0x%x\n",
			&pDeviceObject->DriverObject->DriverName,
			pDeviceObject->DriverObject,
			pDeviceObject ));

		pDeviceObject  = pDeviceObject->AttachedDevice;//获取挂载设备上的挂载设备
	}
}

PDRIVER_OBJECT EnumDeviceStack(PWSTR pwsDriverName)
{
	//通过设备名获取所在驱动的驱动的对象指针

	NTSTATUS status = STATUS_SUCCESS;

	PDRIVER_OBJECT pDriverObj = NULL;
	UNICODE_STRING usDriName;
	RtlInitUnicodeString(&usDriName,pwsDriverName);


	KdPrint(("usDevName:%wZ\n",&usDriName));

	status = ObReferenceObjectByName(&usDriName,
		OBJ_CASE_INSENSITIVE,
		NULL,0,(POBJECT_TYPE)*IoDriverObjectType,
		KernelMode,
		NULL,
		(PVOID*)&pDriverObj);//通过驱动名称获取驱动的对象指针

	if (pDriverObj == NULL)
	{
		KdPrint(("ObReferenceObjectByName Error.status:0x%x",status));
		return NULL;
	}

	PDEVICE_OBJECT pDevObj = pDriverObj->DeviceObject;//获取驱动下创建的设备

	while(pDevObj)
	{
		GetDeviceObjectInfo(pDevObj);//获取设备信息并打印	

		//判断设备上是否有过滤设备
		if (pDevObj->AttachedDevice)
		{
			getAttachedDevInfo(pDevObj);//获取设备上的挂载设备的信息
		}


		//判断设备上的VPB设备
		if (pDevObj->Vpb && pDevObj->Vpb->DeviceObject)
		{
			GetDeviceObjectInfo(pDevObj->Vpb->DeviceObject);

			if (pDevObj->Vpb->DeviceObject->AttachedDevice)
			{
				getAttachedDevInfo(pDevObj->Vpb->DeviceObject);
			}
		}

		//得到在此驱动上建立的下一个设备
		pDevObj = pDevObj->NextDevice;


	}


	return pDriverObj ;

}


NTSTATUS ENUMDEV_DispatchDeviceControl(
									   IN PDEVICE_OBJECT		DeviceObject,
									   IN PIRP					Irp
									   )
{
	NTSTATUS status = STATUS_SUCCESS;
	ULONG uIn=0,uOut=0;
	PIO_STACK_LOCATION irpSp = IoGetCurrentIrpStackLocation(Irp);

	uIn = irpSp->Parameters.DeviceIoControl.InputBufferLength;
	uOut = irpSp->Parameters.DeviceIoControl.OutputBufferLength;


	switch(irpSp->Parameters.DeviceIoControl.IoControlCode)
	{
	case IOCTL_ENUMDEV_DEVNAME:
		{
			KdPrint(("IOCTL_ENUMDEV_DEVNAME...."));
			WCHAR* inputBuffer = (WCHAR*)Irp->AssociatedIrp.SystemBuffer;

			KdPrint(("inputBuffer:%S",inputBuffer));

			EnumDeviceStack(inputBuffer);
			// status = SomeHandlerFunction(irpSp);

		}

	
		break;
	default:
		Irp->IoStatus.Status = STATUS_INVALID_DEVICE_REQUEST;
		Irp->IoStatus.Information = 0;
		break;
	}

	status = Irp->IoStatus.Status;
	IoCompleteRequest(Irp, IO_NO_INCREMENT);
	return status;
}


#ifdef __cplusplus
extern "C" {
#endif
NTSTATUS DriverEntry(
    IN OUT PDRIVER_OBJECT   DriverObject,
    IN PUNICODE_STRING      RegistryPath
    )
{
    PDEVICE_OBJECT pdoDeviceObj = 0;
    NTSTATUS status = STATUS_UNSUCCESSFUL;
    pdoGlobalDrvObj = DriverObject;

    // Create the device object.
    if(!NT_SUCCESS(status = IoCreateDevice(
        DriverObject,
        0,
        &usDeviceName,
        FILE_DEVICE_UNKNOWN,
        FILE_DEVICE_SECURE_OPEN,
        FALSE,
        &pdoDeviceObj
        )))
    {
        // Bail out (implicitly forces the driver to unload).
        return status;
    };

    // Now create the respective symbolic link object
    if(!NT_SUCCESS(status = IoCreateSymbolicLink(
        &usSymlinkName,
        &usDeviceName
        )))
    {
        IoDeleteDevice(pdoDeviceObj);
        return status;
    }

    // NOTE: You need not provide your own implementation for any major function that
    //       you do not want to handle. I have seen code using DDKWizard that left the
    //       *empty* dispatch routines intact. This is not necessary at all!
    DriverObject->MajorFunction[IRP_MJ_CREATE] =
    DriverObject->MajorFunction[IRP_MJ_CLOSE] = ENUMDEV_DispatchCreateClose;
    DriverObject->MajorFunction[IRP_MJ_DEVICE_CONTROL] = ENUMDEV_DispatchDeviceControl;
    DriverObject->DriverUnload = ENUMDEV_DriverUnload;

    return STATUS_SUCCESS;
}
#ifdef __cplusplus
}; // extern "C"
#endif

下面是另一个版本的驱动代码：使用IoGetdeviceProperty函数 有设备对象指针获得设备名称-效果是一样的

///
///
/// Copyright (c) 2014 - <company name here>
///
/// Original filename: EnumDev.cpp
/// Project          : EnumDev
/// Date of creation : 2014-06-26
/// Author(s)        : <author name(s)>
///
/// Purpose          : <description>
///
/// Revisions:
///  0000 [2014-06-26] Initial revision.
///
///

// $Id$

#ifdef __cplusplus
extern "C" {
#endif
#include <ntddk.h>
#include <string.h>
#ifdef __cplusplus
}; // extern "C"
#endif

#include "EnumDev.h"

#ifdef __cplusplus
namespace { // anonymous namespace to limit the scope of this global variable!
#endif
PDRIVER_OBJECT pdoGlobalDrvObj = 0;
#ifdef __cplusplus
}; // anonymous namespace
#endif


#define DEVICE_NAME			"\\Device\\ENUMDEV_DeviceName"
#define SYMLINK_NAME		"\\DosDevices\\ENUMDEV_DeviceName"
PRESET_UNICODE_STRING(usDeviceName, DEVICE_NAME);
PRESET_UNICODE_STRING(usSymlinkName, SYMLINK_NAME);

#ifndef FILE_DEVICE_ENUMDEV
#define FILE_DEVICE_ENUMDEV 0x8000
#endif



const ULONG IOCTL_ENUMDEV_DEVNAME = CTL_CODE(FILE_DEVICE_ENUMDEV, 0x01, METHOD_BUFFERED, FILE_READ_DATA | FILE_WRITE_DATA);



#if __cplusplus
extern "C"
{
#endif

#include <ntddk.h>
#pragma  comment(lib"ntoskrnl.lib")

	NTKERNELAPI NTSTATUS ObReferenceObjectByName(
		IN PUNICODE_STRING ObjectName,
		IN ULONG Attributes,
		IN PACCESS_STATE PassedAccessState OPTIONAL,
		IN ACCESS_MASK DesiredAccess OPTIONAL,
		IN POBJECT_TYPE ObjectType,
		IN KPROCESSOR_MODE AccessMode,
		IN OUT PVOID ParseContent OPTIONAL,
		OUT PVOID *Object);

	NTKERNELAPI NTAPI IoGetBaseFileSystemDeviceObject(
		IN PFILE_OBJECT FileObject);

	extern POBJECT_TYPE *IoDriverObjectType;
	//extern POBJECT_TYPE *IoDeviceObjectType;
#if __cplusplus
};
#endif

typedef struct _DEVICE_EXTENSION 
{
	PDEVICE_OBJECT pDevObj;
	UNICODE_STRING usDevName;
	UNICODE_STRING usLinkName;

	PUCHAR buffer;
	ULONG fileLen;
}DEVICE_EXTENSION,*PDEVICE_EXTENSION;

/*

typedef struct _OBJECT_CREATE_INFORMATION 
{
	ULONG Attributes;
	HANDLE RootDirectory;
	PVOID ParseContext;
	KPROCESSOR_MODE ProbeMode;
	ULONG PagedPoolCharge;
	ULONG NonPagedPoolCharge;
	ULONG SecurityDescriptorCharge;
	PSECURITY_DESCRIPTOR SecurityDescriptor;
	PSECURITY_QUALITY_OF_SERVICE SecurityQos;
	SECURITY_QUALITY_OF_SERVICE SecurityQualityOfService;

}OBJECT_CREATE_INFORMATION,*POBJECT_CREATE_INFORMATION;

typedef struct _OBJECT_HEADER 
{
	LONG PointerCount;
	union
	{
		LONG HandleCount;
		PSINGLE_LIST_ENTRY SEntry;
	};
	POBJECT_TYPE Type;
	UCHAR NameInfoOffset;
	UCHAR HandleInfoOffset;
	UCHAR QuotaInfoOffset;
	UCHAR Flags;
	union
	{
		POBJECT_CREATE_INFORMATION ObjectCreateInfo;
		PVOID QuotaBlockCharged;
	};

	PSECURITY_DESCRIPTOR SecurityDescriptor;
	QUAD Body;

}OBJECT_HEADER,*POBJECT_HEADER;


#define  NUMBER_HASH_BUCKETS 37

typedef struct _OBJECT_DIRECTORY 
{
	struct _OBJECT_DIRECTORY_ENTRY* HashBuckets[NUMBER_HASH_BUCKETS];
	struct _OBJECT_DIRECTORY_ENTRY** LookupBucket;
	BOOLEAN LookupFound;
	USHORT SymbolicLinkUsageCount;
	struct _DEVICE_MAP* DeviceMap;

}OBJECT_DIRECTORY,*POBJECT_DIRECTORY;


typedef struct _OBJECT_HEADER_NAME_INFO
{
	POBJECT_DIRECTORY Directory;
	UNICODE_STRING Name;
	ULONG Reserved;
#if DBG
	ULONG Reserved2 ;
	LONG DbgDereferenceCount ;
#endif
} OBJECT_HEADER_NAME_INFO, * POBJECT_HEADER_NAME_INFO;

#define OBJECT_TO_OBJECT_HEADER( o ) \
	CONTAINING_RECORD( (o), OBJECT_HEADER, Body )

#define OBJECT_HEADER_TO_NAME_INFO( oh ) ((POBJECT_HEADER_NAME_INFO) \
	((oh)->NameInfoOffset == 0 ? NULL : ((PCHAR)(oh) - (oh)->NameInfoOffset)))

*/

NTSTATUS ENUMDEV_DispatchCreateClose(
    IN PDEVICE_OBJECT		DeviceObject,
    IN PIRP					Irp
    )
{
    NTSTATUS status = STATUS_SUCCESS;
    Irp->IoStatus.Status = status;
    Irp->IoStatus.Information = 0;
    IoCompleteRequest(Irp, IO_NO_INCREMENT);
    return status;
}


VOID ENUMDEV_DriverUnload(
    IN PDRIVER_OBJECT		DriverObject
    )
{
    PDEVICE_OBJECT pdoNextDeviceObj = pdoGlobalDrvObj->DeviceObject;
    IoDeleteSymbolicLink(&usSymlinkName);

    // Delete all the device objects
    while(pdoNextDeviceObj)
    {
        PDEVICE_OBJECT pdoThisDeviceObj = pdoNextDeviceObj;
        pdoNextDeviceObj = pdoThisDeviceObj->NextDevice;
        IoDeleteDevice(pdoThisDeviceObj);
    }
}


VOID GetDeviceObjectInfo(PDEVICE_OBJECT pDevObj)
{

	//POBJECT_HEADER pObjectHeader;
	//POBJECT_HEADER_NAME_INFO pObjectHeaderNameInfo;

	if (pDevObj == NULL)
	{
		KdPrint(("GetDeviceObjectInfo::pDevObj is NULL...\n"));
		return;
	}

	
	PWCHAR pResutlt = NULL;
	ULONG uNeedSize =0;
	NTSTATUS status  = IoGetDeviceProperty(pDevObj,
		DevicePropertyPhysicalDeviceObjectName,0,NULL,&uNeedSize);
	if (status == STATUS_BUFFER_TOO_SMALL && uNeedSize > 0)
	{
		pResutlt = (PWCHAR)ExAllocatePool(PagedPool,uNeedSize+1);
		if (pResutlt)
		{
			RtlZeroMemory(pResutlt,uNeedSize+1);
			status = IoGetDeviceProperty(pDevObj,DevicePropertyPhysicalDeviceObjectName,uNeedSize+1,pResutlt,&uNeedSize);
			if (NT_SUCCESS(status))
			{

				if (pResutlt)
				{					
					KdPrint(("Driver Name:%wZ - Device Name:%S - Driver Address:0x%x - Device Address:0x%x\n",
						&pDevObj->DriverObject->DriverName,
						pResutlt,
						pDevObj->DriverObject,
						pDevObj));
				}else
				{
					KdPrint(("Driver Name:%wZ - Device Name:%S - Driver Address:0x%x - Device Address:0x%x\n",
						&pDevObj->DriverObject->DriverName,
						L"NULL",
						pDevObj->DriverObject,
						pDevObj));
				}
			}

		}

	}else
	{
		return ;
	}


	if (pResutlt)
	{
		ExFreePool(pResutlt);
		pResutlt = NULL;
	}



	/*
	pObjectHeader = OBJECT_TO_OBJECT_HEADER(pDevObj);//得到对象头
	
		if (pObjectHeader)
		{
			//查询设备名称并打印
			pObjectHeaderNameInfo = OBJECT_HEADER_TO_NAME_INFO(pObjectHeader);
			if (pObjectHeaderNameInfo && pObjectHeaderNameInfo->Name.Buffer)
			{
				KdPrint(("Driver Name:%wZ - Device Name:%wZ - Driver Address:0x%x - Device Address:0x%x\n",
					&pDevObj->DriverObject->DriverName,
					&pObjectHeaderNameInfo->Name,
					pDevObj->DriverObject,
					pDevObj ));
			}else if (pDevObj->DriverObject) //没有设备名称
			{
				KdPrint(("Driver Name:%wZ - Device Name:%S - Driver Address:0x%x - Device Address:0x%x\n",
					&pDevObj->DriverObject->DriverName,
					L"NULL",
					pDevObj->DriverObject,
					pDevObj));
	
			}
		}*/
	

}

VOID getAttachedDevInfo(PDEVICE_OBJECT pDevObj)
{
	PDEVICE_OBJECT pDeviceObject;
	if (pDevObj == NULL)
	{
		return ;
	}

	pDeviceObject = pDevObj->AttachedDevice;//获取设备上的挂载设备

	while(pDeviceObject)
	{
		KdPrint(( "Attached Driver Name:%wZ,Attached Driver Address:0x%x,Attached DeviceAddress:0x%x\n",
			&pDeviceObject->DriverObject->DriverName,
			pDeviceObject->DriverObject,
			pDeviceObject ));

		pDeviceObject  = pDeviceObject->AttachedDevice;//获取挂载设备上的挂载设备
	}
}

PDRIVER_OBJECT EnumDeviceStack(PWSTR pwsDriverName)
{
	//通过设备名获取所在驱动的驱动的对象指针

	NTSTATUS status = STATUS_SUCCESS;

	PDRIVER_OBJECT pDriverObj = NULL;
	UNICODE_STRING usDriName;
	RtlInitUnicodeString(&usDriName,pwsDriverName);


	KdPrint(("usDevName:%wZ\n",&usDriName));

	status = ObReferenceObjectByName(&usDriName,
		OBJ_CASE_INSENSITIVE,
		NULL,0,(POBJECT_TYPE)*IoDriverObjectType,
		KernelMode,
		NULL,
		(PVOID*)&pDriverObj);//通过驱动名称获取驱动的对象指针

	if (pDriverObj == NULL)
	{
		KdPrint(("ObReferenceObjectByName Error.status:0x%x",status));
		return NULL;
	}

	PDEVICE_OBJECT pDevObj = pDriverObj->DeviceObject;//获取驱动下创建的设备

	while(pDevObj)
	{
		GetDeviceObjectInfo(pDevObj);//获取设备信息并打印	

		//判断设备上是否有过滤设备
		if (pDevObj->AttachedDevice)
		{
			getAttachedDevInfo(pDevObj);//获取设备上的挂载设备的信息
		}


		//判断设备上的VPB设备
		if (pDevObj->Vpb && pDevObj->Vpb->DeviceObject)
		{
			GetDeviceObjectInfo(pDevObj->Vpb->DeviceObject);

			if (pDevObj->Vpb->DeviceObject->AttachedDevice)
			{
				getAttachedDevInfo(pDevObj->Vpb->DeviceObject);
			}
		}

		//得到在此驱动上建立的下一个设备
		pDevObj = pDevObj->NextDevice;


	}


	return pDriverObj ;

}


NTSTATUS ENUMDEV_DispatchDeviceControl(
									   IN PDEVICE_OBJECT		DeviceObject,
									   IN PIRP					Irp
									   )
{
	NTSTATUS status = STATUS_SUCCESS;
	ULONG uIn=0,uOut=0;
	PIO_STACK_LOCATION irpSp = IoGetCurrentIrpStackLocation(Irp);

	uIn = irpSp->Parameters.DeviceIoControl.InputBufferLength;
	uOut = irpSp->Parameters.DeviceIoControl.OutputBufferLength;


	switch(irpSp->Parameters.DeviceIoControl.IoControlCode)
	{
	case IOCTL_ENUMDEV_DEVNAME:
		{
			KdPrint(("IOCTL_ENUMDEV_DEVNAME...."));
			WCHAR* inputBuffer = (WCHAR*)Irp->AssociatedIrp.SystemBuffer;

			KdPrint(("inputBuffer:%S",inputBuffer));

			EnumDeviceStack(inputBuffer);
			// status = SomeHandlerFunction(irpSp);

		}

	
		break;
	default:
		Irp->IoStatus.Status = STATUS_INVALID_DEVICE_REQUEST;
		Irp->IoStatus.Information = 0;
		break;
	}

	status = Irp->IoStatus.Status;
	IoCompleteRequest(Irp, IO_NO_INCREMENT);
	return status;
}


#ifdef __cplusplus
extern "C" {
#endif
NTSTATUS DriverEntry(
    IN OUT PDRIVER_OBJECT   DriverObject,
    IN PUNICODE_STRING      RegistryPath
    )
{
    PDEVICE_OBJECT pdoDeviceObj = 0;
    NTSTATUS status = STATUS_UNSUCCESSFUL;
    pdoGlobalDrvObj = DriverObject;

    // Create the device object.
    if(!NT_SUCCESS(status = IoCreateDevice(
        DriverObject,
        0,
        &usDeviceName,
        FILE_DEVICE_UNKNOWN,
        FILE_DEVICE_SECURE_OPEN,
        FALSE,
        &pdoDeviceObj
        )))
    {
        // Bail out (implicitly forces the driver to unload).
        return status;
    };

    // Now create the respective symbolic link object
    if(!NT_SUCCESS(status = IoCreateSymbolicLink(
        &usSymlinkName,
        &usDeviceName
        )))
    {
        IoDeleteDevice(pdoDeviceObj);
        return status;
    }

    // NOTE: You need not provide your own implementation for any major function that
    //       you do not want to handle. I have seen code using DDKWizard that left the
    //       *empty* dispatch routines intact. This is not necessary at all!
    DriverObject->MajorFunction[IRP_MJ_CREATE] =
    DriverObject->MajorFunction[IRP_MJ_CLOSE] = ENUMDEV_DispatchCreateClose;
    DriverObject->MajorFunction[IRP_MJ_DEVICE_CONTROL] = ENUMDEV_DispatchDeviceControl;
    DriverObject->DriverUnload = ENUMDEV_DriverUnload;

    return STATUS_SUCCESS;
}
#ifdef __cplusplus
}; // extern "C"
#endif


wsgxiaomianao
关注
  • 0
    点赞
  • 踩
  • 1
    收藏
    觉得还不错? 一键收藏
  • 0
    评论
专栏目录
Windows枚举驱动
墨痕诉清风的博客
09-25 247
driverquery /v
Enum Device
03-08
枚举设备管理器中的device 并存储到txt中
USB驱动——USB枚举
manchestermi的博客
09-25 647
一 . 枚举详细过程 USB主机在检测到USB设备插入后，就要对设备进行枚举了。为什么要枚举呢？枚举就是主机host从设备读取一些信息，知道设备是什么样的设备，如何进行通信，这样主机就可以根据这些信息来加载合适的驱动程序。调试USB设备，很重要的一点就是USB的枚举过程，只要枚举成功了，那么就已经成功大半了。    在说枚举之前，先大概说一下USB的一种传输模式——控制传输。这种传输在US
[内核编程]枚举内核空间所有驱动模块
輚至消亡
07-13 1115
1. 通过驱动对象枚举 第一种方法是通过驱动对象。驱动对象DRIVER_OBJECT中有一个字段叫DriverSection的指针。该指针实际上指向一个_LDR_DATA_TABLE_ENTRY结构 与内核态下枚举进程内的模块一样。驱动模块也是通过该结构中的3条双向循环链条以不同顺序分别串起来。 先根据windbg获取对应需要的结构体: typedef struct _PEB_LDR_DATA { ULONG Length; UCHAR Initialized[4]; PVOID..
UKEY通信各个应用的流程介绍--枚举设备
m_nster2014的专栏
03-24 1859
1 枚举设备：因为微软已经提供USB驱动程序开发API接口，所以使用此API接口，进行设备枚举。 标准函数接口：ULONG DEVAPI SKF_EnumDev(BOOL bPresent, LPSTR szNameList, ULONG *pulSize) 输入参数：bPresent  [IN]  为 TRUE 表示取当前设备状态为存在的设备列表。为 FALSE 表示取当前驱动支持的设备列表
根据驱动名称取得设备
anna的专栏
10-23 590
ObReferenceObjectByName ObQueryNameString
枚举指定驱动对象和设备对象
weixin_42071117的博客
04-29 274
// driver.c #include <ntifs.h> #include <ntddk.h> extern POBJECT_TYPE* IoDriverObjectType; NTSTATUS ObReferenceObjectByName( __in PUNICODE_STRING ObjectName, __in ULONG Attributes, __in_opt PACCESS_STATE AccessState, __in_opt ACCESS_MASK
java-枚举 enum
mmdev
07-30 51
DK1.5引入了新的类型——枚举。在 Java 中它虽然算个“小”功能，却给我的开发带来了“大”方便。 用法一：常量在JDK1.5 之前，我们定义常量都是： publicstaticfianl.... 。现在好了，有了枚举，可以把相关的常量分组到一个枚举类型里，而且枚举提供了比常量更多的方法。 public enum Color { RED, GREEN, BLANK, ...
如何让嵌入式设备枚举成WinUSB设备
01-19
USB接口作为PC上和通用的接口，具备可连接多种类型的设备，连接简单，即插即用，支持热插拨，多数应用场景下不需要提供独立的电源，高传输速率，高可靠性等特点，被越来越多的产品作为接口作为接入PC的连接方式。...
EnumDriver_Windows编程_驱动枚举_
10-04
驱动枚举，驱动隐藏，驱动编程。枚举系统内所有驱动，枚举后可实现断链
驱动对象和设备对象查看工具
12-20
驱动对象和设备对象查看工具 驱动对象和设备对象查看工具.zip
BusEnum总线枚举驱动器（是对http://msdn.microsoft.com/en-us/library/dd187254.aspx中文章的翻译,介绍怎样修改BusEnum以加快设备启动的方法）
11-25
是对http://msdn.microsoft.com/en-us/library/dd187254.aspx中文章的翻译,介绍怎样修改BusEnum以加快设备启动的方法.个人英语水平有限..翻译得不准确的地方大家可以讲出来.谢谢
易语言驱动级枚举系统进程
08-21
易语言驱动级枚举系统进程源码系统结构:DriverEntry,驱动通信,DispatchCreateClose,驱动卸载,创建符号链接及设备,读内存,DbgPrint,DbgPrintInt,memcpy,IoCreateDevice,IoCreateSymbolicLink,...
NDIS驱动（一）协议驱动
World-wang
07-25 4687
NDIS网络驱动分类 协议驱动：上层直接提供应用层socket使用的数据传输接口，下层绑定小端口驱动用于发送和接收以太网包、 小端口驱动：直接针对网卡，给协议驱动提供接收和发生数据的能力 中间层驱动：以一种特殊的方式插入到协议驱动和小端口驱动之间，作为过滤驱动的最佳选择。 协议驱动 使用wdk下的ndisport工程，不提供传输层接口，只是只有ReadFile、WriteFile
IRP_完成例程（一）-返回status_success
World-wang
06-27 3435
事例使用IRP_MJ_READ派遣函数演示完成例程
IRP_完成例程（二）-返回STATUS_MORE_PROCESSING_REQUIRED
World-wang
06-27 2798
当IRP被IoCompleteRequest完成时，就开始
WDF模型驱动-初稿
World-wang
07-10 2444
WDF特点： (1)系统兼容，内部磨合了系统、平台间的差异，对外提供了统一的DDI接口 (2)基于对象的框架。 有一个最基本的对象，其他对象都是在这个对象上进行扩展。对象：驱动对象，设备对象，IO对象，队列对象和目标对象。 (3)框架管着所有对象的声明周期。通过引用计数和父子层级关系来维护这个工作。 (4)对框架对象所设计的一套设施，如：上下文空间、同步锁等。使得框架对象容易操作，又有安全
windows驱动编程-串口调试（VMWare虚拟机下wi7 和 Virtual Box下xp）
World-wang
12-24 2314
虚拟机安装的wi7系统下： （1）编辑虚拟机的配置，添加串口设备，下一步设置“输出到命名管道”，下一步设置：该端为服务器、另一端是应用程序，设备状态选中启动时连接，然后点击完成。 （2）启动虚拟机系统，将光标定位在虚拟机内，不断按F10进入调试模式。然后输入“\debugport baudrate=115200” 此时别回车（千万要等待、。。。） （3）在wdk下启动windbg（C:\
C++ 如何读取Windows设备管理器中的所有驱动信息
最新发布
06-10
该程序调用了 SetupDiGetClassDevs 函数获取设备信息列表的句柄，然后通过 SetupDiEnumDeviceInfo 函数枚举设备信息。对于每个设备，它调用 SetupDiGetDeviceRegistryProperty 函数来获取设备名称和供应商名称，并将...

“相关推荐”对你有帮助么？

  • 非常没帮助
  • 没帮助
  • 一般
  • 有帮助
  • 非常有帮助
提交
评论
添加红包

请填写红包祝福语或标题

个

红包个数最小为10个

元

红包金额最低5元

当前余额3.43元 前往充值 >
需支付：10.00元
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付元
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明：

1.余额是钱包充值的虚拟货币，按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载，可以购买VIP、付费专栏及课程。

余额充值