文件操作_创建_读_写_复制文件

#include"ntddk.h"    #define lisaisai1 'MyTt'  VOID xiezai1(PDRIVER_OBJECT qudongduixiang){KdPrint(("已经执行到了 驱动卸载历程\n"));}NTSTATUS kaibeiwenjian(HANDLE handle1, HANDLE handle2)//拷贝文件{NTSTATUS zhuangtai1;IO_STATUS_BLOCK io_zhuangtai = {0};PVOID huanchong = NULL;ULONG zhangdu = 1024*4;LARGE_INTEGER changzhengxing = { 0 };huanchong = ExAllocatePoolWithTag(NonPagedPool, 4000,lisaisai1);do {zhuangtai1=ZwReadFile(handle1, NULL, NULL, NULL, &io_zhuangtai, huanchong, zhangdu, &changzhengxing, NULL);if (!NT_SUCCESS(zhuangtai1)){if (zhuangtai1==STATUS_END_OF_FILE){zhuangtai1 = STATUS_SUCCESS;break;}}zhangdu = io_zhuangtai.Information;//实际读到的长度zhuangtai1 = ZwWriteFile(handle2, NULL, NULL, NULL, &io_zhuangtai, huanchong, zhangdu, &changzhengxing, NULL);if (!NT_SUCCESS(zhuangtai1)){break;}changzhengxing.QuadPart += zhangdu;} while (1);ExFreePool(huanchong);return zhuangtai1;}VOID dakaiwenjian()//打开文件{HANDLE handle1 = NULL;HANDLE handle2 = NULL;UNICODE_STRING mingzi = RTL_CONSTANT_STRING(L"\\??\\C:\\lisaisai.dat");UNICODE_STRING mingzi2 = RTL_CONSTANT_STRING(L"\\??\\C:\\lifaqi.dat");OBJECT_ATTRIBUTES duixiangshuxing;OBJECT_ATTRIBUTES duixiangshuxing_2;IO_STATUS_BLOCKiozhuangtaidasha;LARGE_INTEGER changzhengxing;changzhengxing.u.HighPart = 0;changzhengxing.u.LowPart = 0;InitializeObjectAttributes(&duixiangshuxing, &mingzi, OBJ_CASE_INSENSITIVE | OBJ_KERNEL_HANDLE,NULL,NULL);InitializeObjectAttributes(&duixiangshuxing_2, &mingzi2, OBJ_CASE_INSENSITIVE | OBJ_KERNEL_HANDLE, NULL, NULL);ZwCreateFile(&handle1, GENERIC_ALL, &duixiangshuxing, &iozhuangtaidasha, &changzhengxing, FILE_ATTRIBUTE_NORMAL, FILE_SHARE_READ | FILE_SHARE_WRITE | FILE_SHARE_DELETE, FILE_OPEN_IF, \FILE_NON_DIRECTORY_FILE | FILE_RANDOM_ACCESS | FILE_SYNCHRONOUS_IO_NONALERT, NULL, 0);ZwCreateFile(&handle2, GENERIC_ALL, &duixiangshuxing_2, &iozhuangtaidasha, &changzhengxing, FILE_ATTRIBUTE_NORMAL, FILE_SHARE_READ | FILE_SHARE_WRITE | FILE_SHARE_DELETE, FILE_OPEN_IF, \FILE_NON_DIRECTORY_FILE | FILE_RANDOM_ACCESS | FILE_SYNCHRONOUS_IO_NONALERT, NULL, 0);kaibeiwenjian(handle1, handle2);ZwClose(handle1);ZwClose(handle2);}NTSTATUS DriverEntry(PDRIVER_OBJECT qudongduixiang, PUNICODE_STRING zhucebiao1){dakaiwenjian();qudongduixiang->DriverUnload = xiezai1;return STATUS_SUCCESS;}