{"id":1175,"date":"2012-02-08T10:40:24","date_gmt":"2012-02-08T02:40:24","guid":{"rendered":"http:\/\/115.29.108.60\/?p=1175"},"modified":"2012-02-09T16:37:36","modified_gmt":"2012-02-09T08:37:36","slug":"%e5%87%a0%e4%b8%aa%e9%a9%b1%e5%8a%a8%e5%bc%80%e5%8f%91%e5%b8%b8%e8%af%86","status":"publish","type":"post","link":"http:\/\/115.29.108.60\/?p=1175","title":{"rendered":"\u51e0\u4e2a\u9a71\u52a8\u5f00\u53d1\u5e38\u8bc6"},"content":{"rendered":"<p>\u7528\u5806\u6808\u4e2d\u7684\u9501\u53d8\u91cf\u6765\u52a0\u9501\u662f\u6ca1\u6709\u610f\u4e49\u7684\uff0c\u56e0\u4e3a\u6bcf\u4e2a\u7ebf\u7a0b\u6765\u6267\u884c\u90fd\u4f1a\u7528\u5404\u81ea\u7684\u9501\u4e86\u3002<br \/>\nDRIVER_OBJECT\u4e2d\u6709\u4e00\u4e2a\u6d3e\u9063\u51fd\u6570\u6570\u7ec4MajorFunctions[IRP_MJ_MAXIMUM_FUNCTION]\uff0c\u8fd8\u6709\u4e00\u4e2a\u5355\u72ec\u7684DriverUnload\u3002<br \/>\nIoCreateDeviceSecure\u53ef\u4ee5\u4f7f\u5e94\u7528\u5c42\u7a0b\u5e8f\u4e0d\u5177\u5907\u7ba1\u7406\u5458\u6743\u9650\u7684\u60c5\u51b5\u4e0b\u4e0e\u9a71\u52a8\u901a\u4fe1\u3002<\/p>\n<p>UNICODE_STRING uniStr = RTL_CONSTANT_STRING(L&#8221;uniStr&#8221;);<br \/>\nUNICODE_STRING uniStr;<br \/>\nRtlInitUnicodeString(&amp;uniStr, L&#8221;uniStr&#8221;);<\/p>\n<p>32\u4f4dfastcall\u7b2c\u4e00\u3001\u4e8c\u4e2a\u53c2\u6570\u4f7f\u7528ecx\u548cedx\u4f20\u9012\u3002<br \/>\n64\u4f4d\u4f7f\u7528rcx\u3001rdx\u3001r8\u548cr9\u4f20\u9012\u7b2c\u4e00\u81f3\u56db\u4e2a\u53c2\u6570\u3002<\/p>\n<p>\u6307\u4ee4\u524d\u7f00\u5206\u4e3a\u666e\u901a\u524d\u7f00\uff08Prefixes\uff09\u3001\u6307\u793a\u6027\u524d\u7f00\uff08Mandatory Prefixes)\u548c64\u4f4d\u6269\u5c55\u524d\u7f00\uff08REX Prefixes\uff09\u3002<\/p>\n<p>LIST_ENTRY.Flink\u6307\u5411\u4e0b\u4e00\u4e2aLIST_ENTRY<br \/>\nLIST_ENTRY.Blink\u6307\u5411\u524d\u4e00\u4e2aLIST_ENTRY<br \/>\n<a href=\"http:\/\/msdn.microsoft.com\/en-us\/library\/ff554296(VS.85).aspx\" target=\"_blank\">LIST_ENTRY structure<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u7528\u5806\u6808\u4e2d\u7684\u9501\u53d8\u91cf\u6765\u52a0\u9501\u662f\u6ca1\u6709\u610f\u4e49\u7684\uff0c\u56e0\u4e3a\u6bcf\u4e2a\u7ebf\u7a0b\u6765\u6267\u884c\u90fd\u4f1a\u7528\u5404\u81ea\u7684\u9501\u4e86\u3002 DRIVER_OBJECT\u4e2d\u6709\u4e00\u4e2a\u6d3e [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[23],"tags":[],"class_list":["post-1175","post","type-post","status-publish","format-standard","hentry","category-windows"],"_links":{"self":[{"href":"http:\/\/115.29.108.60\/index.php?rest_route=\/wp\/v2\/posts\/1175","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/115.29.108.60\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/115.29.108.60\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/115.29.108.60\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/115.29.108.60\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1175"}],"version-history":[{"count":3,"href":"http:\/\/115.29.108.60\/index.php?rest_route=\/wp\/v2\/posts\/1175\/revisions"}],"predecessor-version":[{"id":1180,"href":"http:\/\/115.29.108.60\/index.php?rest_route=\/wp\/v2\/posts\/1175\/revisions\/1180"}],"wp:attachment":[{"href":"http:\/\/115.29.108.60\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1175"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/115.29.108.60\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1175"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/115.29.108.60\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1175"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}