
 
易语言驱动读写内存模块源码
系统结构:DriverUnload,DispatchCreate,DispatchClose,DispatchDeviceControl,DriverEntry,OnLoad,UnLoad,ReadMemory,WriteMemory,IoGetCurrentIrpStackLocation,IoGetCurrentIrpStackLocation_,IoGetNextIrpStackLocation,IoCopyCurrentIrpStackLocationToNext,IoSetCompletionRoutine,NT_SUCCESS,InitializeObjectAttributes,IoMarkIrpPending,IrpGetSystemBuffer,指针到短整_,指针到字节_,指针到整数_,写内存整数_,写内存短整_,写内存字节_,取变量地址_文本型_,取变量地址_小数型_,取变量地址_整数型_,取变量地址_子程序指针_,取变量地址_字节集型_,取变量地址_字节型_,整数型到子程序指针_,子程序指针到整数型_,取子程序实际地址_,取高十六位_,取低十六位_,生成Jmp指令_,生成Call指令_,整数型到字节集_,短整数到字节集_,字节型到字节集_,GetNtkrnlpaBase,DisableWriteProtect,EnableWriteProtect,GetNameFunction,GetNumberFunction,Delay,kMalloc,kMallocTag,kFree,GetWindowsVersion,VAR_OSVERSIONINFOEX,RtlGetVersion,MmCreateMDL,MmMapMDL,MmUnMapMDL,StartTimer,StopTimer,IoCallDriver,ObDereferenceObject,KeAcquireSpinLock,KeReleaseSpinLock,InterlockedDecrement,InterlockedIncrement,ExInterlockedInsertTailList,ExInterlockedRemoveHeadList,IoSetCancelRoutine,InterlockedExchangePointer,DbgPrint,DbgPrintInt,DbgPrintString,strlen,IoCreateDevice,IoCreateSymbolicLink,RtlAnsiStringToUnicodeString,RtlInitAnsiString,RtlFreeUnicodeString,IoIsWdmVersionAvailable,IoDeleteDevice,IoDeleteSymbolicLink,IoCompleteRequest,MmGetSystemRoutineAddress,ZwClose,memcmp,memmove,memcpy,memset,swprintf,PsLookupProcessByProcessId,KeStackAttachProcess,KeUnstackDetachProcess,KeSetEvent_Ptr,KeWaitForSingleObject,ObfDereferenceObject,KeInitializeEvent,PsCreateSystemThread,IofCompleteRequest,ExfInterlockedInsertTailList,ExfInterlockedRemoveHeadList,KeGetCurrentThread,PsTerminateSystemThread,KeSetPriorityThread,MmMapLockedPagesSpecifyCache,ZwReadFile,ZwWriteFile,ZwCreateFile,ZwCreateFile2,ZwSetInformationFile,ZwQueryInformationFile_Basic,ZwQueryInformationFile,IoCreateSynchronizationEvent,KeResetEvent,READ_PORT_UCHAR,WRITE_PORT_UCHAR,Ke386SetIoAccessMap,Ke386QueryIoAccessMap,Ke386IoSetAccessProcess,MmFreeNonCachedMemory,MmAllocateNonCachedMemory,RtlZeroMemory,KeRaiseIrql,KeLowerIrql,ExAllocatePool,ExFreePool,MmIsAddressValid,KeDelayExecutionThread,RtlUnicodeStringToAnsiString,PsGetCurrentProcessId,PsGetCurrentThreadId,PsGetCurrentProcess,ZwQueryInformationProcess,RtlConvertLongToLargeInteger,ExAllocatePoolWithTag,IoInitializeTimer,IoStartTimer,IoStopTimer,KeInitializeSpinLock,KeInitializeTimerEx,KeInitializeDpc,KeSetTimerEx,KeCancelTimer,PsGetVersion,MmCreateMdl,MmBuildMdlForNonPagedPool,MmMapLockedPages,MmUnmapLockedPages,IoFreeMdl,ZwOpenSymbolicLinkObject,ZwQuerySymbolicLinkObject,ZwDeleteFile,strcat,ZwQueryFullAttributesFile,RtlInitAnsiString_Ptr,RtlInitUnicodeString,RtlFreeAnsiString,IofCallDriver,ZwQueryObject,ZwDuplicateObject,IoCreateFile,ObReferenceObjectByHandle,IoGetRelatedDeviceObject,IoAllocateIrp,KeAttachProcess,KeDetachProcess,ZwOpenProcess,ZwCreateJobObject,ZwAssignProcessToJobObject,ZwTerminateJobObject,KeRaiseIrqlToDpcLevel,KfAcquireSpinLock,KfReleaseSpinLock,IoAttachDevice,IoDetachDevice,IoCancelIrp,InterlockedExchange,IoGetDeviceObjectPointer,IoAttachDeviceToDeviceStack,ObReferenceObjectByName,KeGetCurrentIrql,是否安装成功,读字节集,写字节集,读整数型,写整数型,读文本型,写文本型,读长整数型,写长整数型,读小数型,写小数型,读短整数型,写短整数型,读数据,写数据,加载驱动,驱动通信,卸载驱动,字节集到内存,内存到字节集,十六到十,CreateService,OpenService,StartService,CloseServiceHandle,CreateFile,ControlService,OpenSCManager,DeleteService,DeviceIoControl,CloseHandle, 
======DriverMain 
           |  | 
           |  |------ _启动子程序 
           |  | 
           |  |------ DriverUnload 
           |  | 
           |  |------ DispatchCreate 
           |  | 
           |  |------ DispatchClose 
           |  | 
           |  |------ DispatchDeviceControl 
           |  | 
           |  |------ DriverEntry 
           |  | 
           |  |------ OnLoad 
           |  | 
           |  |------ UnLoad 
           |  | 
           |  |------ ReadMemory 
           |  | 
           |  |------ WriteMemory 
           |  | 
           |  | 
======DriverHelper 
           |  | 
           |  |------ IoGetCurrentIrpStackLocation 
           |  | 
           |  |------ IoGetCurrentIrpStackLocation_ 
           |  | 
           |  |------ IoGetNextIrpStackLocation 
           |  | 
           |  |------ IoCopyCurrentIrpStackLocationToNext 
           |  | 
           |  |------ IoSetCompletionRoutine 
           |  | 
           |  |------ NT_SUCCESS 
           |  | 
           |  |------ InitializeObjectAttributes 
           |  | 
           |  |------ IoMarkIrpPending 
           |  | 
           |  |------ IrpGetSystemBuffer 
           |  | 
           |  |------ 指针到短整_ 
           |  | 
           |  |------ 指针到字节_ 
           |  | 
           |  |------ 指针到整数_ 
           |  | 
           |  |------ 写内存整数_ 
           |  | 
           |  |------ 写内存短整_ 
           |  | 
           |  |------ 写内存字节_ 
           |  | 
           |  |------ 取变量地址_文本型_ 
           |  | 
           |  |------ 取变量地址_小数型_ 
           |  | 
           |  |------ 取变量地址_整数型_ 
           |  | 
           |  |------ 取变量地址_子程序指针_ 
           |  | 
           |  |------ 取变量地址_字节集型_ 
           |  | 
           |  |------ 取变量地址_字节型_ 
           |  | 
           |  |------ 整数型到子程序指针_ 
           |  | 
           |  |------ 子程序指针到整数型_ 
           |  | 
           |  |------ 取子程序实际地址_ 
           |  | 
           |  |------ 取高十六位_ 
           |  | 
           |  |------ 取低十六位_ 
           |  | 
           |  |------ _Lo 
           |  | 
           |  |------ _Hi 
           |  | 
           |  |------ _Add 
           |  | 
           |  |------ _Sub 
           |  | 
           |  |------ _Inp 
           |  | 
           |  |------ _Outp 
           |  | 
           |  |------ _FSTCW 
           |  | 
           |  |------ _FLDCW 
           |  | 
           |  |------ 生成Jmp指令_ 
           |  | 
           |  |------ 生成Call指令_ 
           |  | 
           |  |------ 整数型到字节集_ 
           |  | 
           |  |------ 短整数到字节集_ 
           |  | 
           |  |------ 字节型到字节集_ 
           |  | 
           |  |------ GetNtkrnlpaBase 
           |  | 
           |  |------ DisableWriteProtect 
           |  | 
           |  |------ EnableWriteProtect 
           |  | 
           |  |------ GetNameFunction 
           |  | 
           |  |------ GetNumberFunction 
           |  | 
           |  |------ Delay 
           |  | 
           |  |------ kMalloc 
           |  | 
           |  |------ kMallocTag 
           |  | 
           |  |------ kFree 
           |  | 
           |  |------ GetWindowsVersion 
           |  | 
           |  |------ VAR_OSVERSIONINFOEX 
           |  | 
           |  |------ RtlGetVersion 
           |  | 
           |  |------ MmCreateMDL 
           |  | 
           |  |------ MmMapMDL 
           |  | 
           |  |------ MmUnMapMDL 
           |  | 
           |  |------ StartTimer 
           |  | 
           |  |------ StopTimer 
           |  | 
           |  | 
======DriverFunDef 
           |  | 
           |  |------ IoCallDriver 
           |  | 
           |  |------ ObDereferenceObject 
           |  | 
           |  |------ KeAcquireSpinLock 
           |  | 
           |  |------ _KeAcquireSpinLock 
           |  | 
           |  |------ KeReleaseSpinLock 
           |  | 
           |  |------ InterlockedDecrement 
           |  | 
           |  |------ InterlockedIncrement 
           |  | 
           |  |------ ExInterlockedInsertTailList 
           |  | 
           |  |------ ExInterlockedRemoveHeadList 
           |  | 
           |  |------ IoSetCancelRoutine 
           |  | 
           |  |------ InterlockedExchangePointer 
           |  | 
           |  | 
======调用的Dll 
           |  | 
           |  |---[dll]------   DbgPrint 
           |  | 
           |  |---[dll]------   DbgPrintInt 
           |  | 
           |  |---[dll]------   DbgPrintString 
           |  | 
           |  |---[dll]------   strlen 
           |  | 
           |  |---[dll]------   _Write_Int 
           |  | 
           |  |---[dll]------   _Write_String 
           |  | 
           |  |---[dll]------   _Read_String 
           |  | 
           |  |---[dll]------   _Write_DRIVER_OBJECT 
           |  | 
           |  |---[dll]------   _Read_通信结构 
           |  | 
           |  |---[dll]------   _Read_DRIVER_OBJECT 
           |  | 
           |  |---[dll]------   _Write_IRP 
           |  | 
           |  |---[dll]------   _Read_IRP 
           |  | 
           |  |---[dll]------   IoCreateDevice 
           |  | 
           |  |---[dll]------   IoCreateSymbolicLink 
           |  | 
           |  |---[dll]------   RtlAnsiStringToUnicodeString 
           |  | 
           |  |---[dll]------   RtlInitAnsiString 
           |  | 
           |  |---[dll]------   RtlFreeUnicodeString 
           |  | 
           |  |---[dll]------   IoIsWdmVersionAvailable 
           |  | 
           |  |---[dll]------   IoDeleteDevice 
           |  | 
           |  |---[dll]------   IoDeleteSymbolicLink 
           |  | 
           |  |---[dll]------   IoCompleteRequest 
           |  | 
           |  |---[dll]------   MmGetSystemRoutineAddress 
           |  | 
           |  |---[dll]------   _Read_Input 
           |  | 
           |  |---[dll]------   _Write_Output 
           |  | 
           |  |---[dll]------   ZwClose 
           |  | 
           |  |---[dll]------   memcmp 
           |  | 
           |  |---[dll]------   memmove 
           |  | 
           |  |---[dll]------   memcpy 
           |  | 
           |  |---[dll]------   memset 
           |  | 
           |  |---[dll]------   swprintf 
           |  | 
           |  |---[dll]------   PsLookupProcessByProcessId 
           |  | 
           |  |---[dll]------   KeStackAttachProcess 
           |  | 
           |  |---[dll]------   KeUnstackDetachProcess 
           |  | 
           |  |---[dll]------   _Read_IO_STACK_LOCATION 
           |  | 
           |  |---[dll]------   KeSetEvent_Ptr 
           |  | 
           |  |---[dll]------   KeWaitForSingleObject 
           |  | 
           |  |---[dll]------   ObfDereferenceObject 
           |  | 
           |  |---[dll]------   KeInitializeEvent 
           |  | 
           |  |---[dll]------   PsCreateSystemThread 
           |  | 
           |  |---[dll]------   IofCompleteRequest 
           |  | 
           |  |---[dll]------   ExfInterlockedInsertTailList 
           |  | 
           |  |---[dll]------   ExfInterlockedRemoveHeadList 
           |  | 
           |  |---[dll]------   KeGetCurrentThread 
           |  | 
           |  |---[dll]------   PsTerminateSystemThread 
           |  | 
           |  |---[dll]------   KeSetPriorityThread 
           |  | 
           |  |---[dll]------   MmMapLockedPagesSpecifyCache 
           |  | 
           |  |---[dll]------   ZwReadFile 
           |  | 
           |  |---[dll]------   ZwWriteFile 
           |  | 
           |  |---[dll]------   ZwCreateFile 
           |  | 
           |  |---[dll]------   ZwCreateFile2 
           |  | 
           |  |---[dll]------   ZwSetInformationFile 
           |  | 
           |  |---[dll]------   ZwQueryInformationFile_Basic 
           |  | 
           |  |---[dll]------   ZwQueryInformationFile 
           |  | 
           |  |---[dll]------   IoCreateSynchronizationEvent 
           |  | 
           |  |---[dll]------   KeResetEvent 
           |  | 
           |  |---[dll]------   READ_PORT_UCHAR 
           |  | 
           |  |---[dll]------   WRITE_PORT_UCHAR 
           |  | 
           |  |---[dll]------   Ke386SetIoAccessMap 
           |  | 
           |  |---[dll]------   Ke386QueryIoAccessMap 
           |  | 
           |  |---[dll]------   Ke386IoSetAccessProcess 
           |  | 
           |  |---[dll]------   MmFreeNonCachedMemory 
           |  | 
           |  |---[dll]------   MmAllocateNonCachedMemory 
           |  | 
           |  |---[dll]------   RtlZeroMemory 
           |  | 
           |  |---[dll]------   KeRaiseIrql 
           |  | 
           |  |---[dll]------   KeLowerIrql 
           |  | 
           |  |---[dll]------   ExAllocatePool 
           |  | 
           |  |---[dll]------   ExFreePool 
           |  | 
           |  |---[dll]------   MmIsAddressValid 
           |  | 
           |  |---[dll]------   KeDelayExecutionThread 
           |  | 
           |  |---[dll]------   RtlUnicodeStringToAnsiString 
           |  | 
           |  |---[dll]------   PsGetCurrentProcessId 
           |  | 
           |  |---[dll]------   PsGetCurrentThreadId 
           |  | 
           |  |---[dll]------   PsGetCurrentProcess 
           |  | 
           |  |---[dll]------   ZwQueryInformationProcess 
           |  | 
           |  |---[dll]------   RtlConvertLongToLargeInteger 
           |  | 
           |  |---[dll]------   _Read_LARGE_INTEGER 
           |  | 
           |  |---[dll]------   ExAllocatePoolWithTag 
           |  | 
           |  |---[dll]------   IoInitializeTimer 
           |  | 
           |  |---[dll]------   IoStartTimer 
           |  | 
           |  |---[dll]------   IoStopTimer 
           |  | 
           |  |---[dll]------   _Write_DEVICE_OBJECT 
           |  | 
           |  |---[dll]------   _Read_DEVICE_OBJECT 
           |  | 
           |  |---[dll]------   _Write_DEVICE_EXTENSION 
           |  | 
           |  |---[dll]------   _Read_DEVICE_EXTENSION 
           |  | 
           |  |---[dll]------   KeInitializeSpinLock 
           |  | 
           |  |---[dll]------   KeInitializeTimerEx 
           |  | 
           |  |---[dll]------   KeInitializeDpc 
           |  | 
           |  |---[dll]------   KeSetTimerEx 
           |  | 
           |  |---[dll]------   KeCancelTimer 
           |  | 
           |  |---[dll]------   PsGetVersion 
           |  | 
           |  |---[dll]------   MmCreateMdl 
           |  | 
           |  |---[dll]------   MmBuildMdlForNonPagedPool 
           |  | 
           |  |---[dll]------   MmMapLockedPages 
           |  | 
           |  |---[dll]------   MmUnmapLockedPages 
           |  | 
           |  |---[dll]------   IoFreeMdl 
           |  | 
           |  |---[dll]------   ZwOpenSymbolicLinkObject 
           |  | 
           |  |---[dll]------   ZwQuerySymbolicLinkObject 
           |  | 
           |  |---[dll]------   ZwDeleteFile 
           |  | 
           |  |---[dll]------   strcat 
           |  | 
           |  |---[dll]------   ZwQueryFullAttributesFile 
           |  | 
           |  |---[dll]------   _Read_UNICODE_STRING 
           |  | 
           |  |---[dll]------   RtlInitAnsiString_Ptr 
           |  | 
           |  |---[dll]------   _Write_UNICODE_STRING 
           |  | 
           |  |---[dll]------   RtlInitUnicodeString 
           |  | 
           |  |---[dll]------   RtlFreeAnsiString 
           |  | 
           |  |---[dll]------   IofCallDriver 
           |  | 
           |  |---[dll]------   ZwQueryObject 
           |  | 
           |  |---[dll]------   ZwDuplicateObject 
           |  | 
           |  |---[dll]------   _strnicmp 
           |  | 
           |  |---[dll]------   IoCreateFile 
           |  | 
           |  |---[dll]------   _Read_SYSTEM_HANDLE_TABLE_ENTRY_INFO 
           |  | 
           |  |---[dll]------   ObReferenceObjectByHandle 
           |  | 
           |  |---[dll]------   IoGetRelatedDeviceObject 
           |  | 
           |  |---[dll]------   IoAllocateIrp 
           |  | 
           |  |---[dll]------   KeAttachProcess 
           |  | 
           |  |---[dll]------   KeDetachProcess 
           |  | 
           |  |---[dll]------   ZwOpenProcess 
           |  | 
           |  |---[dll]------   ZwCreateJobObject 
           |  | 
           |  |---[dll]------   ZwAssignProcessToJobObject 
           |  | 
           |  |---[dll]------   ZwTerminateJobObject 
           |  | 
           |  |---[dll]------   KeRaiseIrqlToDpcLevel 
           |  | 
           |  |---[dll]------   KfAcquireSpinLock 
           |  | 
           |  |---[dll]------   KfReleaseSpinLock 
           |  | 
           |  |---[dll]------   _InterlockedDecrement 
           |  | 
           |  |---[dll]------   _InterlockedIncrement 
           |  | 
           |  |---[dll]------   IoAttachDevice 
           |  | 
           |  |---[dll]------   IoDetachDevice 
           |  | 
           |  |---[dll]------   IoCancelIrp 
           |  | 
           |  |---[dll]------   InterlockedExchange 
           |  | 
           |  |---[dll]------   IoGetDeviceObjectPointer 
           |  | 
           |  |---[dll]------   IoAttachDeviceToDeviceStack 
           |  | 
           |  |---[dll]------   ObReferenceObjectByName 
           |  | 
           |  |---[dll]------   KeGetCurrentIrql 
  ======程序集1 
           |  | 
           |  |------ _启动子程序 
           |  | 
           |  | 
======无极驱动内存类 
           |  | 
           |  |------ _初始化 
           |  | 
           |  |------ _销毁 
           |  | 
           |  |------ 是否安装成功 
           |  | 
           |  |------ 读字节集 
           |  | 
           |  |------ 写字节集 
           |  | 
           |  |------ 读整数型 
           |  | 
           |  |------ 写整数型 
           |  | 
           |  |------ 读文本型 
           |  | 
           |  |------ 写文本型 
           |  | 
           |  |------ 读长整数型 
           |  | 
           |  |------ 写长整数型 
           |  | 
           |  |------ 读小数型 
           |  | 
           |  |------ 写小数型 
           |  | 
           |  |------ 读短整数型 
           |  | 
           |  |------ 写短整数型 
           |  | 
           |  |------ 读数据 
           |  | 
           |  |------ 写数据 
           |  | 
           |  |------ 加载驱动 
           |  | 
           |  |------ 驱动通信 
           |  | 
           |  |------ 卸载驱动 
           |  | 
           |  | 
======辅助程序集 
           |  | 
           |  |------ 字节集到内存 
           |  | 
           |  |------ 内存到字节集 
           |  | 
           |  |------ 十六到十 
           |  | 
           |  | 
======调用的Dll 
           |  | 
           |  |---[dll]------   CreateService 
           |  | 
           |  |---[dll]------   OpenService 
           |  | 
           |  |---[dll]------   StartService 
           |  | 
           |  |---[dll]------   CloseServiceHandle 
           |  | 
           |  |---[dll]------   CreateFile 
           |  | 
           |  |---[dll]------   ControlService 
           |  | 
           |  |---[dll]------   OpenSCManager 
           |  | 
           |  |---[dll]------   DeleteService 
           |  | 
           |  |---[dll]------   DeviceIoControl 
           |  | 
           |  |---[dll]------   CloseHandle 
 
  
  
调用的DLL命令: 
.DLL命令 DbgPrint, , "ntoskrnl.lib", "@_DbgPrint" 
    .参数 Buffer, 文本型 
.DLL命令 DbgPrintInt, , "ntoskrnl.lib", "@_DbgPrint" 
    .参数 Format, 文本型 
    .参数 Value, 整数型 
.DLL命令 DbgPrintString, , "ntoskrnl.lib", "@_DbgPrint" 
    .参数 Format, 文本型 
    .参数 Value, 文本型 
.DLL命令 strlen, 整数型, "ntoskrnl.lib", "@_strlen" 
    .参数 buffer, 整数型 
.DLL命令 _Write_Int, , "ntoskrnl.lib", "@_memcpy" 
    .参数 目的地址, 整数型 
    .参数 源变量, 整数型, 传址 
    .参数 大小, 整数型 
.DLL命令 _Write_String, , "ntoskrnl.lib", "@_memcpy" 
    .参数 目的地址, 整数型 
    .参数 源变量, 文本型, 传址 
    .参数 大小, 整数型 
.DLL命令 _Read_String, , "ntoskrnl.lib", "@_memcpy" 
    .参数 目的变量, 文本型, 传址 
    .参数 源地址, 整数型 
    .参数 大小, 整数型 
.DLL命令 _Write_DRIVER_OBJECT, , "ntoskrnl.lib", "@_memcpy" 
    .参数 目的地址, 整数型 
    .参数 源变量, DRIVER_OBJECT, 传址 
    .参数 大小, 整数型 
.DLL命令 _Read_通信结构, , "ntoskrnl.lib", "@_memcpy" 
    .参数 目的变量, 通信结构, 传址 
    .参数 源地址, 整数型 
    .参数 大小, 整数型 
.DLL命令 _Read_DRIVER_OBJECT, , "ntoskrnl.lib", "@_memcpy" 
    .参数 目的变量, DRIVER_OBJECT, 传址 
    .参数 源地址, 整数型 
    .参数 大小, 整数型 
.DLL命令 _Write_IRP, , "ntoskrnl.lib", "@_memcpy" 
    .参数 目的地址, 整数型 
    .参数 源变量, IRP, 传址 
    .参数 大小, 整数型 
.DLL命令 _Read_IRP, , "ntoskrnl.lib", "@_memcpy" 
    .参数 目的变量, IRP, 传址 
    .参数 源地址, 整数型 
    .参数 大小, 整数型 
.DLL命令 IoCreateDevice, 整数型, "ntoskrnl.lib", "_IoCreateDevice@28", , . 
    .参数 DriverObject, 整数型, , PDRIVER_OBJECT 
    .参数 DeviceExtensionSize, 整数型 
    .参数 DeviceName, UNICODE_STRING, 传址 
    .参数 DeviceType, 整数型 
    .参数 DeviceCharacteristics, 整数型 
    .参数 Exclusive, 逻辑型 
    .参数 DeviceObject, 整数型, 传址, PDEVICE_OBJECT* 
.DLL命令 IoCreateSymbolicLink, 整数型, "ntoskrnl.lib", "_IoCreateSymbolicLink@8" 
    .参数 SymbolicLinkName, UNICODE_STRING, 传址 
    .参数 DeviceName, UNICODE_STRING, 传址 
.DLL命令 RtlAnsiStringToUnicodeString, 整数型, "ntoskrnl.lib", "_RtlAnsiStringToUnicodeString@12" 
    .参数 DestinationString, UNICODE_STRING, 传址 
    .参数 SourceString, ANSI_STRING, 传址 
    .参数 AllocateDestinationString, 逻辑型 
.DLL命令 RtlInitAnsiString, , "ntoskrnl.lib", "_RtlInitAnsiString@8" 
    .参数 DestinationString, ANSI_STRING, 传址 
    .参数 SourceString, 文本型, 传址 
.DLL命令 RtlFreeUnicodeString, , "ntoskrnl.lib", "_RtlFreeUnicodeString@4" 
    .参数 UnicodeString, UNICODE_STRING, 传址 
.DLL命令 IoIsWdmVersionAvailable, 逻辑型, "ntoskrnl.lib", "_IoIsWdmVersionAvailable@8" 
    .参数 MajorVersion, 字节型 
    .参数 MinorVersion, 字节型 
.DLL命令 IoDeleteDevice, , "ntoskrnl.lib", "_IoDeleteDevice@4" 
    .参数 DeviceObject, 整数型 
.DLL命令 IoDeleteSymbolicLink, , "ntoskrnl.lib", "_IoDeleteSymbolicLink@4" 
    .参数 SymbolicLinkName, UNICODE_STRING, 传址 
.DLL命令 IoCompleteRequest, , "ntoskrnl.lib", "_IoCompleteRequest@8" 
    .参数 Irp, 整数型 
    .参数 PriorityBoost, 整数型 
.DLL命令 MmGetSystemRoutineAddress, 整数型, "ntoskrnl.lib", "_MmGetSystemRoutineAddress@4" 
    .参数 SystemRoutineName, UNICODE_STRING 
.DLL命令 _Read_Input, , "ntoskrnl.lib", "@_memcpy" 
    .参数 目的变量, InOutput, 传址 
    .参数 源地址, 整数型 
    .参数 大小, 整数型 
.DLL命令 _Write_Output, , "ntoskrnl.lib", "@_memcpy" 
    .参数 目的变量, 整数型 
    .参数 源地址, InOutput, 传址 
    .参数 大小, 整数型 
.DLL命令 ZwClose, 整数型, "ntoskrnl.lib", "_ZwClose@4" 
    .参数 Handle, 整数型 
.DLL命令 memcmp, 整数型, "ntoskrnl.lib", "_RtlCompareMemory@12" 
    .参数 cmp1, 整数型 
    .参数 cmp2, 整数型 
    .参数 length, 整数型 
.DLL命令 memmove, , "ntoskrnl.lib", "@_memmove" 
    .参数 dest, 整数型 
    .参数 src, 整数型 
    .参数 length, 整数型 
.DLL命令 memcpy, , "ntoskrnl.lib", "@_memcpy" 
    .参数 dest, 整数型 
    .参数 src, 整数型 
    .参数 length, 整数型 
.DLL命令 memset, , "ntoskrnl.lib", "@_memset" 
    .参数 dest, 整数型 
    .参数 value, 整数型 
    .参数 length, 整数型 
.DLL命令 swprintf, , "ntoskrnl.lib", "@_swprintf" 
    .参数 buffer, 字节型, 数组 
    .参数 format, 整数型 
    .参数 arg1, 整数型 
.DLL命令 PsLookupProcessByProcessId, 整数型, "ntoskrnl.lib", "_PsLookupProcessByProcessId@8" 
    .参数 ProcessID, 整数型 
    .参数 EProcess, 整数型, 传址 
.DLL命令 KeStackAttachProcess, , "ntoskrnl.lib", "_KeStackAttachProcess@8" 
    .参数 EProcess, 整数型 
    .参数 ApcState, APC_STATE, 传址 
.DLL命令 KeUnstackDetachProcess, , "ntoskrnl.lib", "_KeUnstackDetachProcess@4" 
    .参数 ApcState, APC_STATE 
.DLL命令 _Read_IO_STACK_LOCATION, , "ntoskrnl.lib", "@_memcpy" 
    .参数 dest, IO_STACK_LOCATION 
    .参数 src, 整数型 
    .参数 length, 整数型 
.DLL命令 KeSetEvent_Ptr, 整数型, "ntoskrnl.lib", "_KeSetEvent@12" 
    .参数 Event, 整数型, , [必须是静态的KEVENT,不允许copy] 
    .参数 Increment, 整数型 
    .参数 Wait, 逻辑型 
.DLL命令 KeWaitForSingleObje
                      
易语言卷帘工具箱源码,初始化卷帘,取星期,更换风格,搜索文件,线程搜索,修改底色,获取信息,取信息记录,取网络信息...
易语言仅用核心支持库实现对外部数据库的操作ADODB操作外部数据库例程源码,根据村组查询数据,数据库_读取数据到高级表格,数据库_保存高级表格数据到数据库,数据库_读取数据到列表...
易语言仅用核心支持库实现对外部数据库的操作ADODB操作外部数据库例程源码,根据村组查询数据,数据库_读取数据到高级表格,数据库_保存高级表格数据到数据库,数据库_读取数据到列表...
易语言仅用核心支持库实现对外部数据库的操作ADODB操作外部数据库例程源码,根据村组查询数据,数据库_读取数据到高级表格,数据库_保存高级表格数据到数据库,数据库_读取数据到列表...
易语言两个文件内存中通讯源码,子程序1,打开文件,生成空文件,生成重复字节文件,移到文件首,移到文件尾,移动读写位置,取读写位置,关闭文件,取文件长度,写出字节集,是否在文件尾,取错...
易语言易模块管理器Include目录源码,CopyTo_CreateProcessDebugInfo,CopyTo_CreateThreadDebugInfo,CopyTo_ExitThreadDebugInfo,CopyTo_ExitProcessDebugInfo,CopyTo_LoadDllDebugInfo,CopyTo_UnloadDllDebugInfo,CopyTo_ExceptionDebugInfo,Copy...
易语言卷帘工具箱源码,初始化卷帘,取星期,更换风格,搜索文件,线程搜索,修改底色,获取信息,取信息记录,取网络信息...
子程序1,打开文件,生成空文件,生成重复字节文件,移到文件首,移到文件尾,移动读写位置,取读写位置,关闭文件,取文件长度,写出字节集,是否在文件尾,取错误信息,读入字节集,读入2M字节集,清除文件缓冲区,读入文本,写出文本,写文本行,读入一行,插入字节集,取文件号...
初始化卷帘,取星期,更换风格,搜索文件,线程搜索,修改底色,获取信息,取信息记录,取网络信息...