根據MSDN的介紹，自己對一些基本結構做一些翻譯，幫助自己理解。 驅動對象 DRIVER_OBJECT typedef struct _DRIVER_OBJECT { CSHORT Type; CSHORT Size; PDEVICE_OBJECT DeviceObject; ULONG Flags ...
根據MSDN的介紹，自己對一些基本結構做一些翻譯，幫助自己理解。
驅動對象 DRIVER_OBJECT
typedef struct _DRIVER_OBJECT { CSHORT Type; CSHORT Size; PDEVICE_OBJECT DeviceObject; ULONG Flags; PVOID DriverStart; ULONG DriverSize; PVOID DriverSection; PDRIVER_EXTENSION DriverExtension; UNICODE_STRING DriverName; PUNICODE_STRING HardwareDatabase; PFAST_IO_DISPATCH FastIoDispatch; PDRIVER_INITIALIZE DriverInit; PDRIVER_STARTIO DriverStartIo; PDRIVER_UNLOAD DriverUnload; PDRIVER_DISPATCH MajorFunction[IRP_MJ_MAXIMUM_FUNCTION + 1]; } DRIVER_OBJECT, *PDRIVER_OBJECT;
DeviceObject
指向驅動創建的設備對象的指針。當驅動成功調用IoCreateDevice時，這個成員會自動更新。驅動可以用這個成員和 DEVICE_OBJECT 的 NextDevice 成員去遍歷驅動創建的所有設備對象（A driver can use this member and the NextDevice member of DEVICE_OBJECT to step through a list of all the device objects that the driver created.）
DriverExtension
指向驅動擴展的指針。驅動擴展的唯一可訪問成員是 DriverExtension->AddDevice，驅動的 DriverEntry 常式存儲了驅動的 AddDevice常式。（The only accessible member of the driver extension is DriverExtension->AddDevice, into which a driver's DriverEntry routine stores the driver's AddDevice routine.）
HardwareDatabase
指向路徑 \Registry\Machine\Hardware ，在這個註冊表路徑存儲著硬體的配置信息。（Pointer to the \Registry\Machine\Hardware path to the hardware configuration information in the registry.）
FastIoDispatch
指向一個定義驅動的 fast I/O 入口的指針的指針。這個成員僅僅在FSDs個網路傳輸驅動裡面使用。
DriverInit
由 I/O 管理器設置的 DriverEntry 常式的入口點。
DriverStartIo
驅動的 StartIo 常式的入口點。如果有的話，當驅動初始化的時候，DriverEntry將會設置這個值；如果驅動沒有 StartIo常式，這個成員就是 NULL。
DriverUnload
驅動的卸載常式的入口點。如果有的話，DriverEntry將在驅動初始化的時候設置這個值；如果驅動沒有卸載常式，這個成員就是 NULL。
MajorFunction[IRP_MJ_MAXIMUM_FUNCTION + 1]
由驅動的 DispatchXxx 常式的入口點組成的 Dispatch 表。數組的索引值IRP_MJ_XXX 對應著 IRP 主要函數編碼。每個驅動都必須給驅動處理的 IRP_MJ_XXX 請求通過這個數組設置入口點。更多信息可以查看 Writing Dispatch Routines。
設備對象 DEVICE_OBJECT
typedef struct _DEVICE_OBJECT { CSHORT Type; USHORT Size; LONG ReferenceCount; struct _DRIVER_OBJECT *DriverObject; struct _DEVICE_OBJECT *NextDevice; struct _DEVICE_OBJECT *AttachedDevice; struct _IRP *CurrentIrp; PIO_TIMER Timer; ULONG Flags; ULONG Characteristics; __volatile PVPB Vpb; PVOID DeviceExtension; DEVICE_TYPE DeviceType; CCHAR StackSize; union { LIST_ENTRY ListEntry; WAIT_CONTEXT_BLOCK Wcb; } Queue; ULONG AlignmentRequirement; KDEVICE_QUEUE DeviceQueue; KDPC Dpc; ULONG ActiveThreadCount; PSECURITY_DESCRIPTOR SecurityDescriptor; KEVENT DeviceLock; USHORT SectorSize; USHORT Spare1; struct _DEVOBJ_EXTENSION *DeviceObjectExtension; PVOID Reserved; } DEVICE_OBJECT, *PDEVICE_OBJECT;
文件對象 DEVICE_OBJECT
typedef struct _FILE_OBJECT { CSHORT Type; CSHORT Size; PDEVICE_OBJECT DeviceObject; PVPB Vpb; PVOID FsContext; PVOID FsContext2; PSECTION_OBJECT_POINTERS SectionObjectPointer; PVOID PrivateCacheMap; NTSTATUS FinalStatus; struct _FILE_OBJECT *RelatedFileObject; BOOLEAN LockOperation; BOOLEAN DeletePending; BOOLEAN ReadAccess; BOOLEAN WriteAccess; BOOLEAN DeleteAccess; BOOLEAN SharedRead; BOOLEAN SharedWrite; BOOLEAN SharedDelete; ULONG Flags; UNICODE_STRING FileName; LARGE_INTEGER CurrentByteOffset; __volatile ULONG Waiters; __volatile ULONG Busy; PVOID LastLock; KEVENT Lock; KEVENT Event; __volatile PIO_COMPLETION_CONTEXT CompletionContext; KSPIN_LOCK IrpListLock; LIST_ENTRY IrpList; __volatile PVOID FileObjectExtension; } FILE_OBJECT, *PFILE_OBJECT;
本文來自博客園，作者：Arthurian，轉載請註明原文鏈接：https://www.cnblogs.com/Arthurian/p/16822575.html
歡迎郵件交流：[email protected]
