WinIO 3.0 (含dll，示例源码及帮助)

// ---------------------------------------------------- // // WinIo v3.0 // // Direct Hardware Access for Windows // // Copyright 1998-2010 Yariv Kaplan // // http://www.internals.com // // ---------------------------------------------------- // #include <ntddk.h> #include "winio_nt.h" #define IOPM_SIZE 0x2000 typedef char IOPM[IOPM_SIZE]; // Function definition section // ----------------------------------------------------------------- NTSTATUS WinIoDispatch(IN PDEVICE_OBJECT DeviceObject, IN PIRP Irp); void WinIoUnload(IN PDRIVER_OBJECT DriverObject); NTSTATUS UnmapPhysicalMemory(HANDLE PhysicalMemoryHandle, PVOID pPhysMemLin, PVOID PhysSection); NTSTATUS MapPhysicalMemoryToLinearSpace(PVOID pPhysAddress, SIZE_T PhysMemSizeInBytes, PVOID *ppPhysMemLin, HANDLE *pPhysicalMemoryHandle, PVOID *ppPhysSection); #ifndef AMD64 void Ke386SetIoAccessMap(int, IOPM *); void Ke386QueryIoAccessMap(int, IOPM *); void Ke386IoSetAccessProcess(PEPROCESS, int); #endif // ----------------------------------------------------------------- // Installable driver initialization entry point. // This entry point is called directly by the I/O system. NTSTATUS DriverEntry (IN PDRIVER_OBJECT DriverObject, IN PUNICODE_STRING RegistryPath) { UNICODE_STRING DeviceNameUnicodeString; UNICODE_STRING DeviceLinkUnicodeString; NTSTATUS ntStatus; PDEVICE_OBJECT DeviceObject = NULL; KdPrint(("Entering DriverEntry")); RtlInitUnicodeString (&DeviceNameUnicodeString, L"\\Device\\WinIo"); // Create a device object ntStatus = IoCreateDevice (DriverObject, 0, &DeviceNameUnicodeString, FILE_DEVICE_WINIO, 0, FALSE, &DeviceObject); if (NT_SUCCESS(ntStatus)) { // Create dispatch points for device control, create, close. DriverObject->MajorFunction[IRP_MJ_CREATE] = DriverObject->MajorFunction[IRP_MJ_CLOSE] = DriverObject->MajorFunction[IRP_MJ_DEVICE_CONTROL] = WinIoDispatch; DriverObject->DriverUnload = WinIoUnload; // Create a symbolic link, e.g. a name that a Win32 app can specify // to open the device. RtlInitUnicodeString (&DeviceLinkUnicodeString, L"\\DosDevices\\WinIo"); ntStatus = IoCreateSymbolicLink (&DeviceLinkUnicodeString, &DeviceNameUnicodeString); if (!NT_SUCCESS(ntStatus)) { // Symbolic link creation failed- note this & then delete the // device object (it's useless if a Win32 app can't get at it). KdPrint(("ERROR: IoCreateSymbolicLink failed")); IoDeleteDevice (DeviceObject); } } else { KdPrint(("ERROR: IoCreateDevice failed")); } KdPrint(("Leaving DriverEntry")); return ntStatus; } // Process the IRPs sent to this device NTSTATUS WinIoDispatch(IN PDEVICE_OBJECT DeviceObject, IN PIRP Irp) { PIO_STACK_LOCATION IrpStack; ULONG dwInputBufferLength; ULONG dwOutputBufferLength; ULONG dwIoControlCode; PVOID pvIOBuffer; NTSTATUS ntStatus; IOPM* pIOPM = NULL; struct tagPhysStruct PhysStruct; struct tagPortStruct PortStruct; struct tagPhysStruct32 *pPhysStruct32 = NULL; KdPrint(("Entering WinIoDispatch")); // Init to default settings Irp->IoStatus.Status = STATUS_SUCCESS; Irp->IoStatus.Information = 0; IrpStack = IoGetCurrentIrpStackLocation(Irp); // Get the pointer to the input/output buffer and it's length pvIOBuffer = Irp->AssociatedIrp.SystemBuffer; dwInputBufferLength = IrpStack->Parameters.DeviceIoControl.InputBufferLength; dwOutputBufferLength = IrpStack->Parameters.DeviceIoControl.OutputBufferLength; switch (IrpStack->MajorFunction) { case IRP_MJ_CREATE: KdPrint(("IRP_MJ_CREATE")); break; case IRP_MJ_CLOSE: KdPrint(("IRP_MJ_CLOSE")); break; case IRP_MJ_DEVICE_CONTROL: KdPrint(("IRP_MJ_DEVICE_CONTROL")); dwIoControlCode = IrpStack->Parameters.DeviceIoControl.IoControlCode; switch (dwIoControlCode) { // The Ke386 calls are no longer available on x64 Windows #ifndef AMD64 case IOCTL_WINIO_ENABLEDIRECTIO: KdPrint(("IOCTL_WINIO_ENABLEDIRECTIO")); pIOPM = MmAllocateNonCachedMemory(sizeof(IOPM)); if (pIOPM) { RtlZeroMemory(pIOPM, sizeof(IOPM)); Ke386IoSetAccessProcess(PsGetCurrentProcess(), 1); Ke386SetIoAccessMap(1, pIOPM); IrpStack->FileObject->FsContext2 = pIOPM; } else Irp->IoStatus.Status = STATUS_INSUFFICIENT_RESOURCES; break; case IOCTL_WINIO_DISABLEDIRECTIO: KdPrint(("IOCTL_WINIO_DISABLEDIRECTIO")); pIOPM = (IOPM *)IrpStack->FileObject->FsContext2; if (pIOPM) { Ke386IoSetAccessProcess(PsGetCurrentProcess(), 0); Ke386SetIoAccessMap(1, pIOPM); MmFreeNonCachedMemory(pIOPM, sizeof(IOPM)); } break; #endif case IOCTL_WINIO_WRITEPORT: KdPrint(("IOCTL_WINIO_WRITEPORT")); if (dwInputBufferLength) { memcpy (&PortStruct, pvIOBuffer, dwInputBufferLength); switch (PortStruct.bSize) { case 1: WRITE_PORT_UCHAR((PUCHAR)(USHORT)PortStruct.wPortAddr, (UCHAR)PortStruct.dwPortVal); break; case 2: WRITE_PORT_USHORT((PUSHORT)(USHORT)PortStruct.wPortAddr, (USHORT)PortStruct.dwPortVal); break; case 4: WRITE_PORT_ULONG((PULONG)(USHORT)PortStruct.wPortAddr, PortStruct.dwPortVal); break; } } else Irp->IoStatus.Status = STATUS_INVALID_PARAMETER; break; case IOCTL_WINIO_READPORT: KdPrint(("IOCTL_WINIO_READPORT")); if (dwInputBufferLength) { memcpy (&PortStruct, pvIOBuffer, dwInputBufferLength); switch (PortStruct.bSize) { case 1: PortStruct.dwPortVal = (ULONG)READ_PORT_UCHAR((PUCHAR)(USHORT)PortStruct.wPortAddr); break; case 2: PortStruct.dwPortVal = (ULONG)READ_PORT_USHORT((PUSHORT)(USHORT)PortStruct.wPortAddr); break; case 4: PortStruct.dwPortVal = READ_PORT_ULONG((PULONG)(USHORT)PortStruct.wPortAddr); break; } memcpy (pvIOBuffer, &PortStruct.dwPortVal, sizeof(PortStruct.dwPortVal)); Irp->IoStatus.Information = sizeof(PortStruct.dwPortVal); } else Irp->IoStatus.Status = STATUS_INVALID_PARAMETER; break; case IOCTL_WINIO_MAPPHYSTOLIN: KdPrint(("IOCTL_WINIO_MAPPHYSTOLIN")); if (dwInputBufferLength) { memcpy (&PhysStruct, pvIOBuffer, dwInputBufferLength); ntStatus = MapPhysicalMemoryToLinearSpace((PVOID)PhysStruct.pvPhysAddress, (SIZE_T)PhysStruct.dwPhysMemSizeInBytes, (PVOID *)&PhysStruct.pvPhysMemLin, (HANDLE *)&PhysStruct.PhysicalMemoryHandle, (PVOID *)&PhysStruct.pvPhysSection); if (NT_SUCCESS(ntStatus)) { memcpy (pvIOBuffer, &PhysStruct, dwInputBufferLength); Irp->IoStatus.Information = dwInputBufferLength; } Irp->IoStatus.Status = ntStatus; } else Irp->IoStatus.Status = STATUS_INVALID_PARAMETER; break; case IOCTL_WINIO_UNMAPPHYSADDR: KdPrint(("IOCTL_WINIO_UNMAPPHYSADDR")); if (dwInputBufferLength) { memcpy (&PhysStruct, pvIOBuffer, dwInputBufferLength); ntStatus = UnmapPhysicalMemory((HANDLE)PhysStruct.PhysicalMemoryHandle, (PVOID)PhysStruct.pvPhysMemLin, (PVOID)PhysStruct.pvPhysSection); Irp->IoStatus.Status = ntStatus; } else Irp->IoStatus.Status = STATUS_INVALID_PARAMETER; break; default: KdPrint(("ERROR: Unknown IRP_MJ_DEVICE_CONTROL")); Irp->IoStatus.Status = STATUS_INVALID_PARAMETER; break; } break; } // DON'T get cute and try to use the status field of the irp in the // return status. That IRP IS GONE as soon as you call IoCompleteRequest. ntStatus = Irp->IoStatus.Status; IoCompleteRequest (Irp, IO_NO_INCREMENT); // We