Location:
Search - ZwDeleteFile
Search list
Description: 直接IRP操作文件的实现问题,其实对于大部分接口(诸如:
ZwReadFile、ZwWriteFile、ZwSetInformationFile、ZwDeleteFile等)在OSR上的“ Rolling Your Own - Building IRPs to Perform I/O ”一文中已经实现,但是那里面的实现还不够全。所以,我就翻出了前段时间在网上淘到的资料,特与大家共享!尤其值得注意的是,这里面还实现了ZwCreateFile接口!
大家都知道使用IRP的好处就是:效率提高了,对中断级要求更宽了,还解决了常见的重入问题等等。 附件中一个是接口的实现代码,另外一个是应用实例。
Platform: |
Size: 146814 |
Author: kingbaser |
Hits:
Description: 驱动开发中使用到的未公开函数如zwdeletefile等
Platform: |
Size: 48843 |
Author: tony zhao |
Hits:
Description: 直接IRP操作文件的实现问题,其实对于大部分接口(诸如:
ZwReadFile、ZwWriteFile、ZwSetInformationFile、ZwDeleteFile等)在OSR上的“ Rolling Your Own - Building IRPs to Perform I/O ”一文中已经实现,但是那里面的实现还不够全。所以,我就翻出了前段时间在网上淘到的资料,特与大家共享!尤其值得注意的是,这里面还实现了ZwCreateFile接口!
大家都知道使用IRP的好处就是:效率提高了,对中断级要求更宽了,还解决了常见的重入问题等等。 附件中一个是接口的实现代码,另外一个是应用实例。
-IRP operation documents directly realize the problem, in fact, for most interface (such as: ZwReadFile, ZwWriteFile, ZwSetInformationFile, ZwDeleteFile etc.) in the OSR on the Rolling Your Own- Building IRPs to Perform I/O one text has been achieved, but that there realize the whole is not enough. Therefore, some time ago I saw video of Amoy in the online information, special to share with everyone! It is worth noting that there have also achieved ZwCreateFile interface! We all know the benefits of the use of IRP is to: improve the efficiency of interrupt-level requirements of a broader, and also solve the common problem of re-entry and so on. Annex A is the realization of interface code, the other one is the application example.
Platform: |
Size: 146432 |
Author: kingbaser |
Hits:
Description: 驱动开发中使用到的未公开函数如zwdeletefile等-Driven Development in the use of undisclosed function, such as such as zwdeletefile
Platform: |
Size: 48128 |
Author: tony zhao |
Hits:
Description: HOOK ZwCreateFile 配合 ZwDeleteFile 实现监视不许指定文件创建-HOOK ZwCreateFile with monitoring the realization of ZwDeleteFile not create the specified file
Platform: |
Size: 2048 |
Author: 朱芮男 |
Hits:
Description: 虚拟光驱实现能够加载镜像文件,并可以实现文件的相关操作-The realization of a virtual drive to load the image file, and related documents can be operated
Platform: |
Size: 832512 |
Author: Jcking |
Hits:
Description: inline hook NtSetInformationFile 保护目录或文件-inline hook NtSetInformationFile
Platform: |
Size: 3072 |
Author: 朱芮男 |
Hits: