參考資訊:
https://wasm.in/
http://four-f.narod.ru/
https://github.com/steward-fu/ddk
main.pas
unit main; interface uses DDDK; const DEV_NAME = '\Device\MyDriver'; SYM_NAME = '\DosDevices\MyDriver'; METHOD_BUFFERED = 0; METHOD_IN_DIRECT = 1; METHOD_OUT_DIRECT = 2; METHOD_NEITHER = 3; FILE_ANY_ACCESS = 0; FILE_DEVICE_UNKNOWN = $22; IOCTL_START = (FILE_DEVICE_UNKNOWN shl 16) or (FILE_ANY_ACCESS shl 14) or ($800 shl 2) or (METHOD_BUFFERED); IOCTL_STOP = (FILE_DEVICE_UNKNOWN shl 16) or (FILE_ANY_ACCESS shl 14) or ($801 shl 2) or (METHOD_BUFFERED); function __DriverEntry(pMyDriver : PDRIVER_OBJECT; pMyRegistry : PUNICODE_STRING) : NTSTATUS; stdcall; implementation var bExit : ULONG; pThread : Handle; procedure MyThread(pParam : Pointer); stdcall; var tt : LARGE_INTEGER; begin tt.HighPart := tt.HighPart or -1; tt.LowPart := ULONG(-10000000); while Integer(bExit) = 0 do begin KeDelayExecutionThread(KernelMode, FALSE, @tt); DbgPrint('Sleep 1s', []); end; DbgPrint('Exit MyThread', []); PsTerminateSystemThread(STATUS_SUCCESS); end; procedure IrpFileCreate(myDevice : WDFDEVICE; myRequest : WDFREQUEST; myFileObject : WDFFILEOBJECT); stdcall; begin DbgPrint('IRP_MJ_CREATE', []); WdfRequestComplete(myRequest, STATUS_SUCCESS); end; procedure IrpFileClose(myFileObject:WDFFILEOBJECT); stdcall; begin DbgPrint('IRP_MJ_CLOSE', []); end; procedure IrpIOCTL(myQueue : WDFQUEUE; myRequest : WDFREQUEST; myOutLen : ULONG; myInLen : ULONG; myCode : ULONG); stdcall; var hThread : Handle; status : NTSTATUS; begin if myCode = IOCTL_START then begin DbgPrint('IOCTL_START', []); bExit := 0; status := PsCreateSystemThread(@hThread, THREAD_ALL_ACCESS, Nil, Handle(-1), Nil, MyThread, Nil); if NT_SUCCESS(status) then begin ObReferenceObjectByHandle(hThread, THREAD_ALL_ACCESS, Nil, KernelMode, @pThread, Nil); ZwClose(hThread); end; end else if myCode = IOCTL_STOP then begin DbgPrint('IOCTL_STOP', []); bExit := 1; KeWaitForSingleObject(Pointer(pThread), Executive, KernelMode, False, Nil); ObDereferenceObject(pThread); end; WdfRequestComplete(myRequest, STATUS_SUCCESS); end; function AddDevice(pMyDriver : WDFDRIVER; pMyDeviceInit : PWDFDEVICE_INIT) : NTSTATUS; stdcall; var device : WDFDEVICE; io_cfg : WDF_IO_QUEUE_CONFIG; file_cfg : WDF_FILEOBJECT_CONFIG; szDevName : UNICODE_STRING; szSymName : UNICODE_STRING; begin WdfDeviceInitSetIoType(pMyDeviceInit, WdfDeviceIoBuffered); WDF_FILEOBJECT_CONFIG_INIT(@file_cfg, @IrpFileCreate, @IrpFileClose, Nil); WdfDeviceInitSetFileObjectConfig(pMyDeviceInit, @file_cfg, WDF_NO_OBJECT_ATTRIBUTES); RtlInitUnicodeString(@szDevName, DEV_NAME); RtlInitUnicodeString(@szSymName, SYM_NAME); WdfDeviceInitAssignName(pMyDeviceInit, @szDevName); WdfDeviceCreate(@pMyDeviceInit, WDF_NO_OBJECT_ATTRIBUTES, @device); WdfDeviceCreateSymbolicLink(device, @szSymName); WDF_IO_QUEUE_CONFIG_INIT_DEFAULT_QUEUE(@io_cfg, WdfIoQueueDispatchSequential); io_cfg.EvtIoDeviceControl := @IrpIOCTL; Result := WdfIoQueueCreate(device, @io_cfg, WDF_NO_OBJECT_ATTRIBUTES, WDF_NO_HANDLE); end; function __DriverEntry(pMyDriver : PDRIVER_OBJECT; pMyRegistry : PUNICODE_STRING) : NTSTATUS; stdcall; var config : WDF_DRIVER_CONFIG; begin WDF_DRIVER_CONFIG_INIT(@config, AddDevice); WdfDriverCreate(pMyDriver, pMyRegistry, WDF_NO_OBJECT_ATTRIBUTES, @config, WDF_NO_HANDLE); Result := STATUS_SUCCESS; end; end.
app.pas
program main; {$APPTYPE CONSOLE} uses forms, dialogs, windows, classes, messages, sysutils, variants, graphics, controls; const METHOD_BUFFERED = 0; METHOD_IN_DIRECT = 1; METHOD_OUT_DIRECT = 2; METHOD_NEITHER = 3; FILE_ANY_ACCESS = 0; FILE_DEVICE_UNKNOWN = $22; var fd : DWORD; ret : DWORD; code : DWORD; begin fd := CreateFile('\\.\MyDriver', GENERIC_READ or GENERIC_WRITE, FILE_SHARE_READ, Nil, OPEN_EXISTING, FILE_ATTRIBUTE_NORMAL, 0); code := (FILE_DEVICE_UNKNOWN shl 16) or (FILE_ANY_ACCESS shl 14) or ($800 shl 2) or (METHOD_BUFFERED); DeviceIoControl(fd, code, Nil, 0, Nil, 0, ret, Nil); Sleep(3000); code := (FILE_DEVICE_UNKNOWN shl 16) or (FILE_ANY_ACCESS shl 14) or ($801 shl 2) or (METHOD_BUFFERED); DeviceIoControl(fd, code, Nil, 0, Nil, 0, ret, Nil); CloseHandle(fd); end.
完成