加载sata驱动:一个特别的驱动加载方式

="highlighter-c">
1. typedef ="keyword">struct _SYSTEM_LOAD_AND_CALL_IMAGE 
2. ="alt">{ 
3.  UNICODE_STRING ModuleName; 
4. ="alt">} SYSTEM_LOAD_AND_CALL_IMAGE, *PSYSTEM_LOAD_AND_CALL_IMAGE;  ="preprocessor">
5. ="preprocessor">
6. ="alt">="preprocessor"># LoadAndCallImage 38 
8. ="alt">="keyword">bool load_sysfile
9. {
10. ="alt">    SYSTEM_LOAD_AND_CALL_IMAGE GregsImage; 
11.     WCHAR daPath = L="">"\\??\\C:\\MIGBOT.SYS"; 
12. ="alt">    RtlInitUnicodeString = (RTLINITUNICODESTRING) 
13.             GetProcAddress( GetModuleHandle(="">"ntdll.dll")
14. ="alt">            ,="">"RtlInitUnicodeString" 
15.             )
16. ="alt">    ZwSetInformation = (ZWSETSYSTEMINFORMATION)   
17.                 GetProcAddress( 
18. ="alt">                    GetModuleHandle(="">"ntdll.dll")
19.                     ,="">"ZwSetInformation" )
20. ="alt">    RtlInitUnicodeString( 
21.         &(GregsImage.ModuleName)
22. ="alt">        ,daPath 
23.     ); 
24. ="alt">    ZwSetInformation(LoadAndCallImage,
25.                 ,="keyword">(SYSTEM_LOAD_AND_CALL_IMAGE))))
26. ="alt">    ="keyword"> ="keyword">true;
27. }

延伸阅读

• 2009-2-12-- linux加载驱动:概述Linux系统的驱动框架及驱动加载