文件磁盘驱动易语言源码
系统结构:Raw_DriverEntry,Raw_FileDiskUnload,Raw_FileDiskCreateClose,Raw_FileDiskReadWrite,Raw_FileDiskDeviceControl,Raw_FileDiskThread,Raw_OnApc_ReadWriteEnd,CallbackInit,CallbackUnInit,MAKE_QWORD,MAKE_QWORD_2,GET_HIGHT_DWORD,写到内存_整数,写到内存偏移_整数,取指针内容_整数,浮点寄存器精度复位,设置浮点控制字寄存器,取变量地址_整数,取变量地址_字节集,kmalloc,kfree,malloc,free,NT_SUCCESS,KdPrint,ExAllocatePool,InitializeObjectAttributes,MyCreateAndInit_ListHead,MyFree_ListHead,MyCreateAndInit_KSpinLock,MyFree_KSpinLock,SeDeleteClientSecurity,ARGUMENT_PRESENT,PsDereferenceImpersonationToken,PsDereferencePrimaryToken,ObDereferenceObject,IoCompleteRequest,ExInterlockedInsertTailList,ExInterlockedRemoveHeadList,SetIrpIoStatus,IoMarkIrpPending,IrpGetSystemBuffer,IrpGetMdlAddress,IoGetCurrentIrpStackLocation,PsGetCurrentThread,MmGetSystemAddressForMdlSafe,DriverEntry,FileDiskCreateDevice,StopDeviceObject,FileDiskUnload,FileDiskDeleteDevice,FileDiskCreateClose,FileDiskReadWrite,InsertPendingIrp,FileDiskDeviceControl,getname,FileDiskThread,OnThreadMessage,OnApc_ReadWriteEnd,FileDiskOpenFile,FileDiskCloseFile,Init,UnInit,OnFree,ADD_PUNICODE_STRING,L,U,PU,PU_,InitVector,UnInitVector,OnFree,OnCreate,clear,push_back,CopyTo_DRIVER_OBJECT,CopyTo_OPEN_FILE_INFORMATION,CopyFrom_OPEN_FILE_INFORMATION,CopyFrom_DRIVER_OBJECT,CopyTo_UNICODE_STRING,CopyFrom_UNICODE_STRING,CopyFrom_DEVICE_EXTENSION,CopyFrom_DISK_GEOMETRY,CopyFrom_GET_LENGTH_INFORMATION,CopyFrom_PARTITION_INFORMATION,CopyFrom_PARTITION_INFORMATION_EX,CopyFrom_CDROM_TOC,CopyTo_VERIFY_INFORMATION,CopyTo_SECURITY_CLIENT_CONTEXT,CopyTo_DEVICE_EXTENSION,CopyTo_IRP,CopyTo_IO_STACK_LOCATION,CopyFrom_IRP,CopyTo_IO_STATUS_BLOCK,CopyTo_MDL,CopyTo_DEVICE_OBJECT,CopyFrom_DEVICE_OBJECT,ExFreePool,ExAllocatePoolWithTag,PsRevertToSelf,SeCreateClientSecurity,SeImpersonateClient,SeTokenType,sizeof_xx,RtlCopyUnicodeString,RtlAppendUnicodeToString,RtlAppendUnicodeStringToString,RtlQueryRegistryValues,DbgPrint,DbgPrint_1,DbgPrint_2s,DbgPrint_2,DbgPrint_3,DbgPrint_4,ZwCreateDirectoryObject,ZwMakeTemporaryObject,ZwClose,memcmp,memmove,memcpy,memset,swprintf,RtlInitAnsiString,RtlInitAnsiString_Ptr,RtlInitUnicodeString,RtlFreeUnicodeString_ptr,RtlFreeUnicodeString,RtlAnsiStringToUnicodeString_ptr,RtlAnsiStringToUnicodeString_uptr,wcslen,strlen,IoDeleteDevice,IoCreateDevice,KeSetEvent_Ptr,KeWaitForSingleObject,ObfDereferenceObject,KeInitializeSpinLock_ptr,KeInitializeEvent,PsCreateSystemThread,IofCompleteRequest,ExfInterlockedInsertTailList,ExfInterlockedRemoveHeadList,KeGetCurrentThread,ObReferenceObjectByHandle,PsTerminateSystemThread,KeSetPriorityThread,MmMapLockedPagesSpecifyCache,ZwReadFile,ZwWriteFile,ZwCreateFile,ZwCreateFile2,ZwSetInformationFile,ZwQueryInformationFile_Basic,ZwQueryInformationFile_Stand,ZwQueryInformationFile_Align,IoCreateSynchronizationEvent,KeResetEvent,
======entry
| |
| |------ _启动子程序
| |
| |------ _临时子程序
| |
| |------ Raw_DriverEntry
| |
| |------ Raw_FileDiskUnload
| |
| |------ Raw_FileDiskCreateClose
| |
| |------ Raw_FileDiskReadWrite
| |
| |------ Raw_FileDiskDeviceControl
| |
| |------ Raw_FileDiskThread
| |
| |------ Raw_OnApc_ReadWriteEnd
| |
| |
======helper
| |
| |------ CallbackInit
| |
| |------ CallbackUnInit
| |
| |------ MAKE_QWORD
| |
| |------ MAKE_QWORD_2
| |
| |------ GET_HIGHT_DWORD
| |
| |------ 写到内存_整数
| |
| |------ 写到内存偏移_整数
| |
| |------ 取指针内容_整数
| |
| |------ 浮点寄存器精度复位
| |
| |------ 设置浮点控制字寄存器
| |
| |------ 取变量地址_整数
| |
| |------ 取变量地址_字节集
| |
| |------ kmalloc
| |
| |------ kfree
| |
| |------ malloc
| |
| |------ free
| |
| |------ NT_SUCCESS
| |
| |------ KdPrint
| |
| |------ ExAllocatePool
| |
| |------ InitializeObjectAttributes
| |
| |------ MyCreateAndInit_ListHead
| |
| |------ MyFree_ListHead
| |
| |------ MyCreateAndInit_KSpinLock
| |
| |------ MyFree_KSpinLock
| |
| |------ SeDeleteClientSecurity
| |
| |------ ARGUMENT_PRESENT
| |
| |------ PsDereferenceImpersonationToken
| |
| |------ PsDereferencePrimaryToken
| |
| |------ ObDereferenceObject
| |
| |------ IoCompleteRequest
| |
| |------ ExInterlockedInsertTailList
| |
| |------ ExInterlockedRemoveHeadList
| |
| |------ SetIrpIoStatus
| |
| |------ IoMarkIrpPending
| |
| |------ IrpGetSystemBuffer
| |
| |------ IrpGetMdlAddress
| |
| |------ IoGetCurrentIrpStackLocation
| |
| |------ PsGetCurrentThread
| |
| |------ MmGetSystemAddressForMdlSafe
| |
| |
======main
| |
| |------ DriverEntry
| |
| |------ FileDiskCreateDevice
| |
| |------ StopDeviceObject
| |
| |------ FileDiskUnload
| |
| |------ FileDiskDeleteDevice
| |
| |------ FileDiskCreateClose
| |
| |------ FileDiskReadWrite
| |
| |------ InsertPendingIrp
| |
| |------ FileDiskDeviceControl
| |
| |------ getname
| |
| |------ FileDiskThread
| |
| |------ OnThreadMessage
| |
| |------ OnApc_ReadWriteEnd
| |
| |------ FileDiskOpenFile
| |
| |------ FileDiskCloseFile
| |
| |
======CStackUnicode
| |
| |------ _初始化
| |
| |------ _销毁
| |
| |------ Init
| |
| |------ UnInit
| |
| |------ OnFree
| |
| |------ ADD_PUNICODE_STRING
| |
| |------ L
| |
| |------ U
| |
| |------ PU
| |
| |------ PU_
| |
| |
======CVector
| |
| |------ InitVector
| |
| |------ UnInitVector
| |
| |------ OnFree
| |
| |------ OnCreate
| |
| |------ clear
| |
| |------ push_back
| |
| |
======调用的Dll
| |
| |---[dll]------ CopyTo_DRIVER_OBJECT
| |
| |---[dll]------ CopyTo_OPEN_FILE_INFORMATION
| |
| |---[dll]------ CopyFrom_OPEN_FILE_INFORMATION
| |
| |---[dll]------ CopyFrom_DRIVER_OBJECT
| |
| |---[dll]------ CopyTo_UNICODE_STRING
| |
| |---[dll]------ CopyFrom_UNICODE_STRING
| |
| |---[dll]------ CopyFrom_DEVICE_EXTENSION
| |
| |---[dll]------ CopyFrom_DISK_GEOMETRY
| |
| |---[dll]------ CopyFrom_GET_LENGTH_INFORMATION
| |
| |---[dll]------ CopyFrom_PARTITION_INFORMATION
| |
| |---[dll]------ CopyFrom_PARTITION_INFORMATION_EX
| |
| |---[dll]------ CopyFrom_CDROM_TOC
| |
| |---[dll]------ CopyTo_VERIFY_INFORMATION
| |
| |---[dll]------ CopyTo_SECURITY_CLIENT_CONTEXT
| |
| |---[dll]------ CopyTo_DEVICE_EXTENSION
| |
| |---[dll]------ CopyTo_IRP
| |
| |---[dll]------ CopyTo_IO_STACK_LOCATION
| |
| |---[dll]------ CopyFrom_IRP
| |
| |---[dll]------ CopyTo_IO_STATUS_BLOCK
| |
| |---[dll]------ CopyTo_MDL
| |
| |---[dll]------ CopyTo_DEVICE_OBJECT
| |
| |---[dll]------ CopyFrom_DEVICE_OBJECT
| |
| |---[dll]------ ExFreePool
| |
| |---[dll]------ ExAllocatePoolWithTag
| |
| |---[dll]------ PsRevertToSelf
| |
| |---[dll]------ SeCreateClientSecurity
| |
| |---[dll]------ SeImpersonateClient
| |
| |---[dll]------ SeTokenType
| |
| |---[dll]------ sizeof_xx
| |
| |---[dll]------ RtlCopyUnicodeString
| |
| |---[dll]------ RtlAppendUnicodeToString
| |
| |---[dll]------ RtlAppendUnicodeStringToString
| |
| |---[dll]------ RtlQueryRegistryValues
| |
| |---[dll]------ DbgPrint
| |
| |---[dll]------ DbgPrint_1
| |
| |---[dll]------ DbgPrint_2s
| |
| |---[dll]------ DbgPrint_2
| |
| |---[dll]------ DbgPrint_3
| |
| |---[dll]------ DbgPrint_4
| |
| |---[dll]------ ZwCreateDirectoryObject
| |
| |---[dll]------ ZwMakeTemporaryObject
| |
| |---[dll]------ ZwClose
| |
| |---[dll]------ memcmp
| |
| |---[dll]------ memmove
| |
| |---[dll]------ memcpy
| |
| |---[dll]------ memset
| |
| |---[dll]------ swprintf
| |
| |---[dll]------ RtlInitAnsiString
| |
| |---[dll]------ RtlInitAnsiString_Ptr
| |
| |---[dll]------ RtlInitUnicodeString
| |
| |---[dll]------ RtlFreeUnicodeString_ptr
| |
| |---[dll]------ RtlFreeUnicodeString
| |
| |---[dll]------ RtlAnsiStringToUnicodeString_ptr
| |
| |---[dll]------ RtlAnsiStringToUnicodeString_uptr
| |
| |---[dll]------ wcslen
| |
| |---[dll]------ strlen
| |
| |---[dll]------ IoDeleteDevice
| |
| |---[dll]------ IoCreateDevice
| |
| |---[dll]------ KeSetEvent_Ptr
| |
| |---[dll]------ KeWaitForSingleObject
| |
| |---[dll]------ ObfDereferenceObject
| |
| |---[dll]------ KeInitializeSpinLock_ptr
| |
| |---[dll]------ KeInitializeEvent
| |
| |---[dll]------ PsCreateSystemThread
| |
| |---[dll]------ IofCompleteRequest
| |
| |---[dll]------ ExfInterlockedInsertTailList
| |
| |---[dll]------ ExfInterlockedRemoveHeadList
| |
| |---[dll]------ KeGetCurrentThread
| |
| |---[dll]------ ObReferenceObjectByHandle
| |
| |---[dll]------ PsTerminateSystemThread
| |
| |---[dll]------ KeSetPriorityThread
| |
| |---[dll]------ MmMapLockedPagesSpecifyCache
| |
| |---[dll]------ ZwReadFile
| |
| |---[dll]------ ZwWriteFile
| |
| |---[dll]------ ZwCreateFile
| |
| |---[dll]------ ZwCreateFile2
| |
| |---[dll]------ ZwSetInformationFile
| |
| |---[dll]------ ZwQueryInformationFile_Basic
| |
| |---[dll]------ ZwQueryInformationFile_Stand
| |
| |---[dll]------ ZwQueryInformationFile_Align
| |
| |---[dll]------ IoCreateSynchronizationEvent
| |
| |---[dll]------ KeResetEvent
调用的DLL命令:
.DLL命令 CopyTo_DRIVER_OBJECT, , "ntoskrnl.lib", "@_memcpy"
.参数 dest, DRIVER_OBJECT
.参数 src
.参数 length
.DLL命令 CopyTo_OPEN_FILE_INFORMATION, , "ntoskrnl.lib", "@_memcpy"
.参数 dest, OPEN_FILE_INFORMATION
.参数 src
.参数 length
.DLL命令 CopyFrom_OPEN_FILE_INFORMATION, , "ntoskrnl.lib", "@_memcpy"
.参数 dest
.参数 src, OPEN_FILE_INFORMATION
.参数 length
.DLL命令 CopyFrom_DRIVER_OBJECT, , "ntoskrnl.lib", "@_memcpy"
.参数 dest
.参数 src, DRIVER_OBJECT
.参数 length
.DLL命令 CopyTo_UNICODE_STRING, , "ntoskrnl.lib", "@_memcpy"
.参数 dest, UNICODE_STRING
.参数 src
.参数 length
.DLL命令 CopyFrom_UNICODE_STRING, , "ntoskrnl.lib", "@_memcpy"
.参数 dest
.参数 src, UNICODE_STRING
.参数 length
.DLL命令 CopyFrom_DEVICE_EXTENSION, , "ntoskrnl.lib", "@_memcpy"
.参数 dest
.参数 src, DEVICE_EXTENSION
.参数 length
.DLL命令 CopyFrom_DISK_GEOMETRY, , "ntoskrnl.lib", "@_memcpy"
.参数 dest
.参数 src, DISK_GEOMETRY
.参数 length
.DLL命令 CopyFrom_GET_LENGTH_INFORMATION, , "ntoskrnl.lib", "@_memcpy"
.参数 dest
.参数 src, GET_LENGTH_INFORMATION
.参数 length
.DLL命令 CopyFrom_PARTITION_INFORMATION, , "ntoskrnl.lib", "@_memcpy"
.参数 dest
.参数 src, PARTITION_INFORMATION
.参数 length
.DLL命令 CopyFrom_PARTITION_INFORMATION_EX, , "ntoskrnl.lib", "@_memcpy"
.参数 dest
.参数 src, PARTITION_INFORMATION_EX
.参数 length
.DLL命令 CopyFrom_CDROM_TOC, , "ntoskrnl.lib", "@_memcpy"
.参数 dest
.参数 src, CDROM_TOC
.参数 length
.DLL命令 CopyTo_VERIFY_INFORMATION, , "ntoskrnl.lib", "@_memcpy"
.参数 dest, VERIFY_INFORMATION
.参数 src
.参数 length
.DLL命令 CopyTo_SECURITY_CLIENT_CONTEXT, , "ntoskrnl.lib", "@_memcpy"
.参数 dest, SECURITY_CLIENT_CONTEXT
.参数 src
.参数 length
.DLL命令 CopyTo_DEVICE_EXTENSION, , "ntoskrnl.lib", "@_memcpy"
.参数 dest, DEVICE_EXTENSION
.参数 src
.参数 length
.DLL命令 CopyTo_IRP, , "ntoskrnl.lib", "@_memcpy"
.参数 dest, IRP
.参数 src
.参数 length
.DLL命令 CopyTo_IO_STACK_LOCATION, , "ntoskrnl.lib", "@_memcpy"
.参数 dest, IO_STACK_LOCATION
.参数 src
.参数 length
.DLL命令 CopyFrom_IRP, , "ntoskrnl.lib", "@_memcpy"
.参数 dest
.参数 src, IRP
.参数 length
.DLL命令 CopyTo_IO_STATUS_BLOCK, , "ntoskrnl.lib", "@_memcpy"
.参数 dest, IO_STATUS_BLOCK
.参数 src
.参数 length
.DLL命令 CopyTo_MDL, , "ntoskrnl.lib", "@_memcpy"
.参数 dest, MDL
.参数 src
.参数 length
.DLL命令 CopyTo_DEVICE_OBJECT, , "ntoskrnl.lib", "@_memcpy"
.参数 dest, DEVICE_OBJECT
.参数 src
.参数 length
.DLL命令 CopyFrom_DEVICE_OBJECT, , "ntoskrnl.lib", "@_memcpy"
.参数 dest
.参数 src, DEVICE_OBJECT
.参数 length
.DLL命令 ExFreePool, , "ntoskrnl.lib", "_ExFreePool@4"
.参数 p
.DLL命令 ExAllocatePoolWithTag, 整数型, "ntoskrnl.lib", "_ExAllocatePoolWithTag@12"
.参数 PoolType
.参数 NumberOfBytes
.参数 Tag
.DLL命令 PsRevertToSelf, , "ntoskrnl.lib", "_PsRevertToSelf@0"
.DLL命令 SeCreateClientSecurity, 整数型, "ntoskrnl.lib", "_SeCreateClientSecurity@16"
.参数 Thread
.参数 QualityOfService, SECURITY_QUALITY_OF_SERVICE
.参数 RemoteClient, 逻辑型
.参数 ClientContext
.DLL命令 SeImpersonateClient, , "ntoskrnl.lib", "_SeImpersonateClient@8"
.参数 ClientContext
.参数 ServerThread
.DLL命令 SeTokenType, 整数型, "ntoskrnl.lib", "_SeTokenType@4"
.参数 Token
.DLL命令 sizeof_xx, 整数型, , "GlobalSize"
.参数 o, DEVICE_EXTENSION
.DLL命令 RtlCopyUnicodeString, , "ntoskrnl.lib", "_RtlCopyUnicodeString@8"
.参数 DestinationString, UNICODE_STRING
.参数 SourceString, UNICODE_STRING
.DLL命令 RtlAppendUnicodeToString, 整数型, "ntoskrnl.lib", "_RtlAppendUnicodeToString@8"
.参数 Destination, UNICODE_STRING
.参数 Source, 整数型
.DLL命令 RtlAppendUnicodeStringToString, , "ntoskrnl.lib", "_RtlAppendUnicodeStringToString@8"
.参数 Destination, UNICODE_STRING
.参数 Source, UNICODE_STRING
.DLL命令 RtlQueryRegistryValues, 整数型, "ntoskrnl.lib", "_RtlQueryRegistryValues@20"
.参数 RelativeTo
.参数 Path
.参数 QueryTable, RTL_QUERY_REGISTRY_TABLE, 数组
.参数 Context
.参数 Environment
.DLL命令 DbgPrint, 整数型, "ntoskrnl.lib", "@_DbgPrint"
.参数 pch, 文本型
.DLL命令 DbgPrint_1, 整数型, "ntoskrnl.lib", "@_DbgPrint"
.参数 pch, 文本型
.参数 arg1
.DLL命令 DbgPrint_2s, 整数型, "ntoskrnl.lib", "@_DbgPrint"
.参数 pch, 文本型
.参数 arg1
.参数 arg2, 文本型
.DLL命令 DbgPrint_2, 整数型, "ntoskrnl.lib", "@_DbgPrint"
.参数 pch, 文本型
.参数 arg1
.参数 arg2
.DLL命令 DbgPrint_3, 整数型, "ntoskrnl.lib", "@_DbgPrint"
.参数 pch, 文本型
.参数 arg1
.参数 arg2
.参数 arg3
.DLL命令 DbgPrint_4, , "ntoskrnl.lib", "@_DbgPrint"
.参数 pch, 文本型
.参数 arg1
.参数 arg2
.参数 arg3
.参数 arg4
.DLL命令 ZwCreateDirectoryObject, 整数型, "ntoskrnl.lib", "_ZwCreateDirectoryObject@12"
.参数 DirectoryHandle, , 传址
.参数 DesiredAccess
.参数 ObjectAttributes, OBJECT_ATTRIBUTES
.DLL命令 ZwMakeTemporaryObject, 整数型, "ntoskrnl.lib", "_ZwMakeTemporaryObject@4"
.参数 Handle
.DLL命令 ZwClose, 整数型, "ntoskrnl.lib", "_ZwClose@4"
.参数 Handle
.DLL命令 memcmp, 整数型, "ntoskrnl.lib", "@_memcmp"
.参数 cmp1
.参数 cmp2
.参数 length
.DLL命令 memmove, , "ntoskrnl.lib", "@_memmove"
.参数 dest
.参数 src
.参数 length
.DLL命令 memcpy, , "ntoskrnl.lib", "@_memcpy"
.参数 dest
.参数 src
.参数 length
.DLL命令 memset, , "ntoskrnl.lib", "@_memset"
.参数 dest
.参数 value
.参数 length
.DLL命令 swprintf, , "ntoskrnl.lib", "@_swprintf"
.参数 buffer, 字节型, 数组
.参数 format
.参数 arg1
.DLL命令 RtlInitAnsiString, , "ntdll.lib", "_RtlInitAnsiString@8"
.参数 DestinationString, ANSI_STRING
.参数 SourceString, 文本型
.DLL命令 RtlInitAnsiString_Ptr, , "ntdll.lib", "_RtlInitAnsiString@8"
.参数 DestinationString, ANSI_STRING
.参数 SourceString
.DLL命令 RtlInitUnicodeString, , "ntdll.lib", "_RtlInitUnicodeString@8"
.参数 DestinationString, UNICODE_STRING
.参数 SourceString, 字节型, 数组
.DLL命令 RtlFreeUnicodeString_ptr, , "ntdll.lib", "_RtlFreeUnicodeString@4"
.参数 UnicodeString
.DLL命令 RtlFreeUnicodeString, , "ntdll.lib", "_RtlFreeUnicodeString@4"
.参数 UnicodeString, UNICODE_STRING
.DLL命令 RtlAnsiStringToUnicodeString_ptr, , "ntdll.lib", "_RtlAnsiStringToUnicodeString@12"
.参数 DestinationString, 整数型
.参数 SourceString, ANSI_STRING
.参数 AllocateDestinationString, 逻辑型
.DLL命令 RtlAnsiStringToUnicodeString_uptr, , "ntdll.lib", "_RtlAnsiStringToUnicodeString@12"
.参数 DestinationString, 整数型
.参数 SourceString, ANSI_STRING
.参数 AllocateDestinationString, 逻辑型
.DLL命令 wcslen, 整数型, "ntoskrnl.lib", "@_wcslen"
.参数 s
.DLL命令 strlen, 整数型, "ntoskrnl.lib", "@_strlen"
.参数 s, 文本型
.DLL命令 IoDeleteDevice, , "ntoskrnl.lib", "_IoDeleteDevice@4"
.参数 DeviceObject
.DLL命令 IoCreateDevice, 整数型, "ntoskrnl.lib", "_IoCreateDevice@28"
.参数 DriverObject
.参数 DeviceExtensionSize
.参数 DeviceName, UNICODE_STRING
.参数 DeviceType
.参数 DeviceCharacteristics
.参数 Exclusive, 逻辑型
.参数 DeviceObject, , 传址
.DLL命令 KeSetEvent_Ptr, 整数型, "ntoskrnl.lib", "_KeSetEvent@12"
.参数 Event, , , [必须是静态的KEVENT,不允许copy]
.参数 Increment
.参数 Wait, 逻辑型
.DLL命令 KeWaitForSingleObject, , "ntoskrnl.lib", "_KeWaitForSingleObject@20"
.参数 Object
.参数 WaitReason
.参数 WaitMode
.参数 Alertable, 逻辑型
.参数 Timeout
.DLL命令 ObfDereferenceObject, , "ntoskrnl.lib", "@@ObfDereferenceObject@4", , [fastcall] [神奇的函数符号@@]
.参数 Object
.DLL命令 KeInitializeSpinLock_ptr, , "ntoskrnl.lib", "_KeInitializeSpinLock@4"
.参数 SpinLock
.DLL命令 KeInitializeEvent, , "ntoskrnl.lib", "_KeInitializeEvent@12"
.参数 Event, , , [必须是静态的KEVENT,不允许copy]
.参数 Type
.参数 State, 逻辑型
.DLL命令 PsCreateSystemThread, 整数型, "ntoskrnl.lib", "_PsCreateSystemThread@28"
.参数 ThreadHandle, , 传址
.参数 DesiredAccess
.参数 ObjectAttributes
.参数 ProcessHandle
.参数 ClientId
.参数 StartRoutine
.参数 StartContext
.DLL命令 IofCompleteRequest, , "ntoskrnl.lib", "@@IofCompleteRequest@8", , [fastcall] [神奇的函数符号@@]
.参数 Irp
.参数 PriorityBoost
.DLL命令 ExfInterlockedInsertTailList, 整数型, "ntoskrnl.lib", "@@ExfInterlockedInsertTailList@12", , [fastcall] [神奇的函数符号@@]
.参数 ListHead
.参数 ListEntry
.参数 Lock
.DLL命令 ExfInterlockedRemoveHeadList, 整数型, "ntoskrnl.lib", "@@ExfInterlockedRemoveHeadList@8"
.参数 ListHead
.参数 Lock
.DLL命令 KeGetCurrentThread, 整数型, "ntoskrnl.lib", "_KeGetCurrentThread@0"
.DLL命令 ObReferenceObjectByHandle, 整数型, "ntoskrnl.lib", "_ObReferenceObjectByHandle@24"
.参数 Handle
.参数 DesiredAccess
.参数 ObjectType
.参数 AccessMode
.参数 Object, , 传址
.参数 HandleInformation
.DLL命令 PsTerminateSystemThread, 整数型, "ntoskrnl.lib", "_PsTerminateSystemThread@4"
.参数 ExitStatus
.DLL命令 KeSetPriorityThread, , "ntoskrnl.lib", "_KeSetPriorityThread@8"
.参数 Thread
.参数 Priority
.DLL命令 MmMapLockedPagesSpecifyCache, 整数型, "ntoskrnl.lib", "_MmMapLockedPagesSpecifyCache@24"
.参数 MemoryDescriptorList
.参数 AccessMode
.参数 CacheType
.参数 BaseAddress
.参数 BugCheckOnFailure, 逻辑型
.参数 Priority
.DLL命令 ZwReadFile, 整数型, "ntoskrnl.lib", "_ZwReadFile@36"
.参数 FileHandle
.参数 Event
.参数 ApcRoutine
.参数 ApcContext
.参数 IoStatusBlock
.参数 Buffer
.参数 Length
.参数 ByteOffset, LARGE_INTEGER
.参数 Key
.DLL命令 ZwWriteFile, 整数型, "ntoskrnl.lib", "_ZwWriteFile@36"
.参数 FileHandle
.参数 Event
.参数 ApcRoutine
.参数 ApcContext
.参数 IoStatusBlock
.参数 Buffer
.参数 Length
.参数 ByteOffset, LARGE_INTEGER
.参数 Key
.DLL命令 ZwCreateFile, 整数型, "ntoskrnl.lib", "_ZwCreateFile@44"
.参数 FileHandle, , 传址
.参数 DesiredAccess
.参数 ObjectAttributes, OBJECT_ATTRIBUTES
.参数 IoStatusBlock, IO_STATUS_BLOCK, 传址
.参数 AllocationSize
.参数 FileAttributes
.参数 ShareAccess
.参数 CreateDisposition
.参数 CreateOptions
.参数 EaBuffer
.参数 EaLength
.DLL命令 ZwCreateFile2, 整数型, "ntoskrnl.lib", "_ZwCreateFile@44"
.参数 FileHandle, , 传址
.参数 DesiredAccess
.参数 ObjectAttributes, OBJECT_ATTRIBUTES
.参数 IoStatusBlock, IO_STATUS_BLOCK, 传址
.参数 AllocationSize, LARGE_INTEGER
.参数 FileAttributes
.参数 ShareAccess
.参数 CreateDisposition
.参数 CreateOptions
.参数 EaBuffer
.参数 EaLength
.DLL命令 ZwSetInformationFile, 整数型, "ntoskrnl.lib", "_ZwSetInformationFile@20"
.参数 FileHandle
.参数 IoStatusBlock, IO_STATUS_BLOCK, 传址
.参数 FileInformation, FILE_END_OF_FILE_INFORMATION
.参数 Length
.参数 FileInformationClass
.DLL命令 ZwQueryInformationFile_Basic, 整数型, "ntoskrnl.lib", "_ZwQueryInformationFile@20"
.参数 FileHandle
.参数 IoStatusBlock, IO_STATUS_BLOCK, 传址
.参数 FileInformation, FILE_BASIC_INFORMATION
.参数 Length
.参数 FileInformationClass
.DLL命令 ZwQueryInformationFile_Stand, 整数型, "ntoskrnl.lib", "_ZwQueryInformationFile@20"
.参数 FileHandle
.参数 IoStatusBlock, IO_STATUS_BLOCK, 传址
.参数 FileInformation, FILE_STANDARD_INFORMATION
.参数 Length
.参数 FileInformationClass
.DLL命令 ZwQueryInformationFile_Align, 整数型, "ntoskrnl.lib", "_ZwQueryInformationFile@20"
.参数 FileHandle
.参数 IoStatusBlock, IO_STATUS_BLOCK, 传址
.参数 FileInformation, FILE_ALIGNMENT_INFORMATION
.参数 Length
.参数 FileInformationClass
.DLL命令 IoCreateSynchronizationEvent, 整数型, "ntoskrnl.lib", "_IoCreateSynchronizationEvent@8"
.参数 EventName
.参数 EventHandle, , 传址
.DLL命令 KeResetEvent, , "ntoskrnl.lib", "_KeResetEvent@4"
.参数 Event
易语言糊模查找窗口标题并弹出源码,枚举系统所有窗口,GetWindow,GetWindowText,GetWindowTextLength,FindWindow,ShowWindow...
易语言其它简易换肤13种源码,配色...
易语言简单的验证码识别加界面源码,主识别程序,是否符合,说明,程序初始化,显示验证码,分割图片,对应识别,替换杂色,全部替换色,除指定色外全部除去,读入图片...
易语言笔划输入法一整套文件源码,子程序1,数清,清,按钮1,按钮2,按钮3,按钮4,按钮5,注,投递文本,解码火星文,计1,笔画字刷新,操作,字刷新,计,填,GetGUIThreadInfo,ClientToScreen,屏幕截图,拖动屏幕...
易语言窗口渐变源码,CreateSolidBrush,DeleteObject,FillRect,GetDC...
易语言窗体拉动源码,设置系统菜单,API_设置窗口区域,创建椭圆区域,取窗口风格,置窗口风格...
易语言突破灰色按钮和水波特效,突破灰色按钮和水波特效源码,装载图片,水周期,水波特效,装载图片_,接收装载图返回的整数,水周期_,窗口绘图,水波特效_,突破灰色按钮,激活按钮,取得当...
易语言突破灰色按钮和水波特效源码,装载图片,水周期,水波特效,突破灰色按钮,激活按钮,取得当前活动窗口句柄,枚举所有子窗体,是否活动窗口,激活窗口...
易语言科大讯飞语音库调用例程源码,刷新窗口,取错误码,初始化,反初始化,连接语音服务器,断开语音服务器,置合成参数,取合成参数,字符串合成到音频文件,文本文件合成到音频文件,播放...